[Samba] winbind, AD on other network an machine accounts
Hello, we have a network with Xp Clients and AD. On a second network we have XP clients Redhat linux servers that run samba. Between the networks there is a firewall. Now we would like to authenticate the XP clients in the linux network against the AD. As far as I did understand it should be possible to use winbind to authenticate users from the samba server to the AD. What about the machines ? Can they also be authenticated against the AD ? When I connect a new machine to the second network does winbind register the machine into AD ? Thanks Andreas -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: Samba/Ldap problems with Versions 3.0.24
Hi, Adam Tauno Williams wrote: we have similiar problems with samba+ldap after updating to 3.0.27. But in our case, the following ldap-Attributes won't get updated: sambaPwdMustChange sambaPwdCanChange only sambPwdLastSet gets altered. in newly created accounts the two Attributes even won't be created !? I already checked every log-file i can think of, I played with verbose logging, but I really can't find a solution up to now. I also asked about this stuff here in the mailinglist several weeks ago, but no answer til now. So what could we do ? Is there a policy set to affect these attributes? littleboy:~ # pdbedit -P minimum password age account policy value for minimum password age is 86400 littleboy:~ # pdbedit -P maximum password age account policy value for maximum password age is 5184000 Sorry for answering so late, got some spare days. It seems to be two different problems - mine and the one of the thread starter. Both concering the LDAP Samba password attributes, but this seems to be the only thing in common. I checked those two values: [underworld ~]# pdbedit -P minimum password age account policy minimum password age description: Minimal password age, in seconds (default: 0 = allow immediate password change) account policy minimum password age value is: 0 [underworld ~]# pdbedit -P maximum password age account policy maximum password age description: Maximum password age, in seconds (default: -1 = never expire passwords) account policy maximum password age value is: 7776000 So those Attribute should be set in LDAP actually , but the don't ! Any suggestions ? Thanks in advance, Markus Kahle -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba-winbind under Solaris8
Dear All, I have successfully compiled MIT krb5 and samba 3.0.28a under Solaris8. Joining an AD domain works fine and also the commands wbinfo -t, -g and -u list all of the users. getent passwd and getent group are also working. The problem now is that when i run the group user command it just stays there and doesn't display any users. This works fine under Linux (SLES9, RHEL4) but not under Solaris8. I really have no clue, but that is just one problem. The other big problem is that now i get kicked out of the login shell or telnet/ssh after a few minutes and when I login as a domain user and start a command like ls it gets put in the background immediatley. Any suggestions? Regards, Oliver Oliver Weinmann Unix/Linux Administrator VEGA IT GmbH Europaplatz 5 D-64293 Darmstadt Germany Tel : +49 (0) 6151 8257 744 Fax : +49 (0)6151 8257-799 Email : [EMAIL PROTECTED] Web : www.vega-group.com Register court/Registergericht: Darmstadt, HRB No. 4096, Managing Directors/Geschäftsführer: Philip Cartmell, Susan Bygrave, John Lewis Notice of Confidentiality This transmission is intended for the named addressee only. It contains information which may be confidential and which may also be privileged. Unless you are the named addressee (or authorised to receive it for the addressee) you may not copy or use it, or disclose it to anyone else. If you have received this transmission in error please notify the sender immediately. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba Restrictions
Hi, I'm hopping you can give me some advice, I work for a Financial Institute and we are very interested in implementing Samba as a file server running on AIX 5.3. Before we can think about implementing this we need to no if Samba has any limitation on number of folders, files and shares. The current file storage system is running on Windows 2003 server and has somewhere in the region of 51,000 folders and 450,000 files taking up 200GB would samba be able to cope with this? Your feedback would be appreciated. Thanks Tim This e-mail and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this e-mail in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this e-mail or its attachments. Internet communications are not guaranteed to be secure or virus-free. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this e-mail may be monitored by the Barclays Group for operational or business reasons. Any opinion or other information in this e-mail or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group. Barclays Bank PLC.Registered in England and Wales (registered no. 1026167). Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom. Barclays Bank PLC is authorised and regulated by the Financial Services Authority. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Restrictions
On Mon, Mar 31, 2008 at 02:11:22PM +0100, [EMAIL PROTECTED] wrote: I'm hopping you can give me some advice, I work for a Financial Institute and we are very interested in implementing Samba as a file server running on AIX 5.3. Before we can think about implementing this we need to no if Samba has any limitation on number of folders, files and shares. The current file storage system is running on Windows 2003 server and has somewhere in the region of 51,000 folders and 450,000 files taking up 200GB would samba be able to cope with this? Your feedback would be appreciated. Sure, there are no such limits in Samba. The only thing that you need to watch out for is individual directories with lots and lots of files or subdirs in one level. This is possible but might become slow. I would start to test it if you find directories with 1000 ntries. Volker pgpFccLlCDQT4.pgp Description: PGP signature -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Restrictions
On Mon, Mar 31, 2008 at 9:11 AM, [EMAIL PROTECTED] wrote: Hi, I'm hopping you can give me some advice, I work for a Financial Institute and we are very interested in implementing Samba as a file server running on AIX 5.3. Before we can think about implementing this we need to no if Samba has any limitation on number of folders, files and shares. The current file storage system is running on Windows 2003 server and has somewhere in the region of 51,000 folders and 450,000 files taking up 200GB would samba be able to cope with this? Yes. Our main samba server has. 4,000,000 files taking up 3TB of space with many thousand folders. John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba Restrictions
I have single directories with over 100,000 entries and about 4 million files on the system total spanning about 15TB. I don't think you should have a problem. Only problem I have is that directory listings take a while with 100K entries but that's to be expected. On Mon, Mar 31, 2008 at 9:11 AM, [EMAIL PROTECTED] wrote: Hi, I'm hopping you can give me some advice, I work for a Financial Institute and we are very interested in implementing Samba as a file server running on AIX 5.3. Before we can think about implementing this we need to no if Samba has any limitation on number of folders, files and shares. The current file storage system is running on Windows 2003 server and has somewhere in the region of 51,000 folders and 450,000 files taking up 200GB would samba be able to cope with this? Your feedback would be appreciated. Thanks Tim This e-mail and any attachments are confidential and intended solely for the addressee and may also be privileged or exempt from disclosure under applicable law. If you are not the addressee, or have received this e-mail in error, please notify the sender immediately, delete it from your system and do not copy, disclose or otherwise act upon any part of this e-mail or its attachments. Internet communications are not guaranteed to be secure or virus-free. The Barclays Group does not accept responsibility for any loss arising from unauthorised access to, or interference with, any Internet communications by any third party, or from the transmission of any viruses. Replies to this e-mail may be monitored by the Barclays Group for operational or business reasons. Any opinion or other information in this e-mail or its attachments that does not relate to the business of the Barclays Group is personal to the sender and is not given or endorsed by the Barclays Group. Barclays Bank PLC.Registered in England and Wales (registered no. 1026167). Registered Office: 1 Churchill Place, London, E14 5HP, United Kingdom. Barclays Bank PLC is authorised and regulated by the Financial Services Authority. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba server joining domain and browsing group shares
Alex thank you for your support, can you please explain the command below: Specially the chown I'm not familiar with the syntax you are using. If I try to apply this to our TEST configuration it does not work we get the following error: cuzco:~ # chown 0:NETSYS\Series /Series chown: `0:NETSYS\\Series': invalid group Being NETSYS = workgroup name Being Series = group Series defined on the ADS windows PDC Being /Series = a disk share on the samba machine On the server you have to use the chown command and chmod command to give the AD group DEP_TEST_MEMBER access on the Linux filesystem: chmod g+s /data/grp chown 0:TEST\DEP_TEST_MEMBER /data/grp QUESTION: does DEP_TEST_MEMBER is a group defined on the Linux box and on the ADS. or is only defined on the ADS.? on my linux TEST box on the /etc/groups there is no Series group on my windows TEST ADS there is a group called Series with 4 users Another thing maybe I have not been clear, from our windows workstations we want to connect to a share in the Linux box but the user logged in the workstation does NOT have an account on linux machine he has an account on the windows ADS PDC. The following things work on our test environment machines: - Kerberos configuration see command below: cuzco:~ # klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: [EMAIL PROTECTED] Valid starting ExpiresService principal 02/26/08 23:36:17 02/27/08 09:36:53 krbtgt/[EMAIL PROTECTED] renew until 02/27/08 23:36:17 Kerberos 4 ticket cache: /tmp/tkt0 klist: You have no tickets cached - Joining the Domain see command below: cuzco:~ # net ads join -U Administrator Administrator's password: Using short domain name -- NETSYS Joined 'CUZCO' to realm 'NETSYSTEMSINFO.COM' - client connection using ADS user not defined on server. (My brother does not have an account on the linux box only on the ADS test machine) cuzco:~ # smbclient -L cuzco -Uamendez Password: Domain=[NETSYS] OS=[Unix] Server=[Samba 3.0.26a-3.5-1616-SUSE-SL10.3] Sharename Type Comment - --- users Disk All users print$ Disk Printer Drivers documentaries Disk Documentaries files movies Disk Movies media files series Disk Series media files IPC$IPC IPC Service (Linux file server) lj2600n Printer HP Color LaserJet 2600n Domain=[NETSYS] OS=[Unix] Server=[Samba 3.0.26a-3.5-1616-SUSE-SL10.3] Server Comment ---- AREQUIPA CUZCOLinux file server WorkgroupMaster ---- NETSYS AREQUIPA This does not work: We are on the PDC and we try to browse/connect to any of the shares other than home on the linux samba box. See attached print.ps image. This is the debug oputpt of the /var/log/samba/* files, when we attemmpt to browse/connect to the shares: 02/28/2008 10:40:34 PM libads/kerberos_verify.c ads_keytab_verify_ticket172 ads_keytab_verify_ticket: krb5_rd_req failed for all 12 matched keytab principals 02/28/2008 10:40:34 PM libads/kerberos_verify.c ads_keytab_verify_ticket172 ads_keytab_verify_ticket: krb5_rd_req failed for all 12 matched keytab principals 02/28/2008 10:40:34 PM libads/kerberos_verify.c ads_keytab_verify_ticket172 ads_keytab_verify_ticket: krb5_rd_req failed for all 12 matched keytab principals 02/28/2008 10:40:34 PM libads/kerberos_verify.c ads_keytab_verify_ticket172 ads_keytab_verify_ticket: krb5_rd_req failed for all 12 matched keytab principals 02/28/2008 10:40:34 PM libads/kerberos_verify.c ads_keytab_verify_ticket172 ads_keytab_verify_ticket: krb5_rd_req failed for all 12 matched keytab principals 02/28/2008 10:40:34 PM libads/kerberos_verify.c ads_keytab_verify_ticket172 ads_keytab_verify_ticket: krb5_rd_req failed for all 12 matched keytab principals 02/28/2008 10:40:34 PM libads/kerberos_verify.c ads_secrets_verify_ticket 279 ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed 02/28/2008 10:40:34 PM libads/kerberos_verify.c ads_secrets_verify_ticket 279 ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed 02/28/2008 10:40:34 PM libads/kerberos_verify.c ads_secrets_verify_ticket 279 ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed 02/28/2008 10:40:34 PM libads/kerberos_verify.c ads_secrets_verify_ticket 279 ads_secrets_verify_ticket: enc type [23] failed to decrypt with error Decrypt integrity check failed
[Samba] XP x64 will hang/bsod when using mapped network drive
Hi, I have a very strange problem with a new Windows XP Professional x64 client machine which will either hang or BSOD when I manipulate (move, copy, compress) a file on a mapped network drive BUT not when I navigate to the file through My Network Places i.e. selecting WORKGROUP - FILESERVER - Share2 - Directory - File. I have a mix of Windows PCs on my network including Win2K, WinXP (32-bit) which have all been using the accessing the shares without problems for 18 months or so. A new Vista Enterprise (64-bit) machine was added at the same time as the XP 64-bit PC but it is just the XP Pro 64-bit PC that has this problem. I'm seeing many different Windows STOP codes but having tested all the hardware components I'm satisfied that this is specicially something to do with XP x64's interaction with Samba. We are using RHEL4 which ships with Samba 3.0.25b. The relevant sections from smb.conf: [global] netbios name = FILESERVER workgroup = WORKGROUP server string = File Server hosts allow = 1.2.3. 1.2.4. 127. load printers = no cups options = raw log file = /var/log/samba/%m.log max log size = 50 security = user smb passwd file = /etc/samba/smbpasswd encrypt passwords = yes socket options = TCP_NODELAY SO_RCVBUF=65536 SO_SNDBUF=65536 IPTOS_LOWDELAY max xmit = 65536 use sendfile = no lock spin time = 15 lock spin count = 100 oplocks = no level2 oplocks = no kernel oplocks = no remote browse sync = 1.2.4.1 remote announce = 1.2.4.1/THEWORKGROUP local master = yes os level = 34 domain master = yes preferred master = yes wins support = yes dns proxy = yes preserve case = yes idmap uid = 16777216-33554431 idmap gid = 16777216-33554431 template shell = /bin/false username map = /etc/samba/smbusers winbind use default domain = no [share1] writeable = yes readonly = no browseable = yes path = /smb/share1 create mask = 0775 directory mask = 0770 [share2] path = /smb/share2 copy = share1 guest ok = yes Has anyone else experienced (and subsequently fixed) this problem with XP Pro x64 and Samba? I have searched Google and found a few reports of Windows Explorer freezing but from the description it sounds as if the PC can be recovered by killing the Explorer process in the task manager. With my problem the PC is either completely locked or displaying BSOD. Thanks, Kevin -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Re: pam_mkhomedir.so not working.
Linux == Linux Addict [EMAIL PROTECTED] writes: Linux I finally got this started working for ssh after changing Linux things like privilege seperation, allowkerberos login Linux parameters in sshd_config. Still not sure about why su was Linux not working. Anyways thanks for your help. If you turn off privilege separation, just be warned you turned off a major security feature in sshd. Without privilege separation much of sshd must be run mostly as root, and any security flaws can grant an attacker root access. Damien Miller gave a talk at LCA2008 and then LUV on the security features of openssh, unfortunately it didn't get recorded :-(. -- Brian May [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] how to limit space of share
Dear all I'm install samba 3.0.28 And share directory for user in path /XXX ( size of this path = 2 TB ) But user working and save file to this path 905 GB . Its show message Disk full How to sole this plob' for user this path to 2 TB Please help me. Thankyou Pramote Soongkitboon Network System Support GMMGRAMMY Public Company Limited Tel: +66 2669-9455 Office website : http://www.gmember.com http://www.gmember.com , http://www.ikeyclub.com http://www.ikeyclub.com , http://www.daraoke.com Personal website : http://www.rukawa.co.nr http://www.rukawa.co.nr -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Re: [linux-cifs-client] Unable to mount using sec=none and mount.cifs
On Wed, 5 Mar 2008 14:34:13 -0500 Christopher DeMarco [EMAIL PROTECTED] wrote: I'm attempting to mount a CIFS share with the following stipulations: 1. I must have the UNIX extensions (specfically, symlinks). 2. I must use plaintext authentication (don't ask). I've recompiled the cifs kernel module to allow plaintext authentication, using the stock Ubuntu 7.10 kernel (2.6.22.9c). My /etc/fstab line looks like... //superman/www-pub /smb/superman/www-pub cifs auto,uid=33,gid=33,username=WORKGROUP/www-pub,password=sekret,sec=none 0 0 The contents of /proc/fs/cifs/* are as follows: :: DebugData :: Display Internal CIFS Data Structures for Debugging --- CIFS Version 1.49 Active VFS Requests: 0 Servers: Shares: :: Experimental :: 0 :: LinuxExtensionsEnabled :: 1 :: LookupCacheEnabled :: 1 :: MultiuserMount :: 0 :: OplockEnabled :: 1 :: SecurityFlags :: 0x20 :: cifsFYI :: 7 :: traceSMB :: 1 The immediate result of ``mount /smb/superman/www-pub'' is... mount error 5 = Input/output error Refer to the mount.cifs(8) manual page (e.g.man mount.cifs) ...and I get this in syslog: Mar 5 14:28:38 bee kernel: [1723623.069722] fs/cifs/cifsfs.c: Devname: //superman/www-pub flags: 64 Mar 5 14:28:38 bee kernel: [1723623.069734] fs/cifs/connect.c: CIFS VFS: in cifs_mount as Xid: 29 with uid: 0 Mar 5 14:28:38 bee kernel: [1723623.069747] fs/cifs/connect.c: Domain name set Mar 5 14:28:38 bee kernel: [1723623.069760] fs/cifs/connect.c: null user Mar 5 14:28:38 bee kernel: [1723623.069764] fs/cifs/connect.c: UNC: \\superman\www-pub ip: 192.70.254.27 Mar 5 14:28:38 bee kernel: [1723623.069779] fs/cifs/connect.c: Socket created Mar 5 14:28:38 bee kernel: [1723623.069957] fs/cifs/connect.c: sndbuf 16384 rcvbuf 87380 rcvtimeo 0x7fff Mar 5 14:28:38 bee kernel: [1723623.070466] fs/cifs/connect.c: Demultiplex PID: 17076 Mar 5 14:28:38 bee kernel: [1723623.070581] fs/cifs/connect.c: Existing smb sess not found Mar 5 14:28:38 bee kernel: [1723623.070596] fs/cifs/cifssmb.c: secFlags 0x20 Mar 5 14:28:38 bee kernel: [1723623.070603] fs/cifs/transport.c: For smb_command 114 Mar 5 14:28:38 bee kernel: [1723623.070610] fs/cifs/transport.c: Sending smb of length 69 Mar 5 14:28:38 bee kernel: [1723623.070613] | 0x00 0x00 0x00 0x45 0xff 0x53 0x4d 0x42 | _ _ _ E \377 S M B Mar 5 14:28:38 bee kernel: [1723623.070626] | 0x72 0x00 0x00 0x00 0x00 0x00 0x01 0xc0 | r _ _ _ _ _ _ À Mar 5 14:28:38 bee kernel: [1723623.070638] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 | _ _ _ _ _ _ _ _ Mar 5 14:28:38 bee kernel: [1723623.070648] | 0x00 0x00 0x00 0x00 0x00 0x00 0xb3 0x42 | _ _ _ _ _ _ ³ B Mar 5 14:28:38 bee kernel: [1723623.070658] | 0x00 0x00 0x01 0x00 0x00 0x22 0x00 0x02 | _ _ _ _ _ _ _ Mar 5 14:28:38 bee kernel: [1723623.070669] | 0x4c 0x4d 0x31 0x2e 0x32 0x58 0x30 0x30 | L M 1 . 2 X 0 0 Mar 5 14:28:38 bee kernel: [1723623.070681] | 0x32 0x00 0x02 0x4c 0x41 0x4e 0x4d 0x41 | 2 _ _ L A N M A Mar 5 14:28:38 bee kernel: [1723623.070694] | 0x4e 0x32 0x2e 0x31 0x00 0x02 0x4e 0x54 | N 2 . 1 _ _ N T Mar 5 14:28:38 bee kernel: [1723623.070705] | 0x20 0x4c 0x4d 0x20 0x30 0x2e 0x31 0x32 |L M 0 . 1 2 Mar 5 14:28:38 bee kernel: [1723623.070716] | 0x00 | _ Mar 5 14:28:38 bee kernel: [1723623.070891] fs/cifs/connect.c: rfc1002 length 0x54) Mar 5 14:28:38 bee kernel: [1723623.070902] | 0x50 0x00 0x00 0x00 0xff 0x53 0x4d 0x42 | P _ _ _ \377 S M B Mar 5 14:28:38 bee kernel: [1723623.070913] | 0x72 0x00 0x00 0x00 0x00 0x98 0x01 0x80 | r _ _ _ _ _ _ _ Mar 5 14:28:38 bee kernel: [1723623.070923] | 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 | _ _ _ _ _ _ _ _ Mar 5 14:28:38 bee kernel: [1723623.070935] | 0x00 0x00 0x00 0x00 0x00 0x00 0xb3 0x42 | _ _ _ _ _ _ ³ B Mar 5 14:28:38 bee kernel: [1723623.070946] | 0x00 0x00 0x01 0x00 0x11 0x02 0x00 0x01 | _ _ _ _ _ _ _ _ Mar 5 14:28:38 bee kernel: [1723623.070956] | 0x32 0x00 0x01 0x00 0x04 0x81 0x00 0x00 | 2 _ _ _ _ _ _ _ Mar 5 14:28:38 bee kernel: [1723623.070966] | 0x00 0x00 0x01 0x00 0x8e 0x54 0xb8 0x58 | _ _ _ _ _ T ¸ X Mar 5 14:28:38 bee kernel: [1723623.070976] | 0xfd 0xd3 0x00 0x00 0x2a 0x34 0x29 0x65 | ý Ó _ _ * 4 ) e Mar 5 14:28:38 bee
[Samba] Failed to set servicePrincipalNames
When trying to execute net ads join, I was getting the following message: Failed to set servicePrincipalNames. Please ensure that the DNS domain of this server matches the AD domain, Or rejoin with using Domain Admin credentials. A couple of tips to troubleshoot this problem: 1. Do a kinit [EMAIL PROTECTED] so that you can get a ticket opened and not have to authenticate each time you try this. 2. Make sure that hostname --fqdn returns the same fully-qualified domain name as the account you're trying to add. 3. For me, I had a second line in /etc/hosts that was messing things up. 127.0.0.1 had the right samba1.domain.com name, but a secondary interface just had samba1. 4. add -d 10 to the command line to print debugging information. I found the following line: name_to_fqdn: lookup for SAMBA1 - SAMBA1. INSTEAD OF: name_to_fqdn: lookup for SAMBA1 - SAMBA1.domain.com. Which was my clue that even though hostname --fqdn was returning the right thing (samba1.domain.com), the name_to_fqdn function was getting a different fqdn returned. 5. I also had to mess with /etc/nsswitch.conf - I previously had hosts resolving as files wins dns, and switching to just files dns fixed the problem. I'd sure love to find some good documentation on hostnames - it seems that different functions resolve in different ways. In particular, /etc/hosts is a real mess since it allows fqdn's and non-fqdn's, and apparently reads the hostname from various addresses belonging to the local machine. There seems to be something just not right about having a line 127.0.0.1 hostname hostname.domain.com and then having the system just pick one to be its hostname. Also, I should mention for anyone who doesn't know it (you probably already figured it out if you got here) that Kerberos is case-sensitive, and at least Windows expects all CAPS for DOMAIN.COM. Annoying, but I'm sure there's some reason for it... Anyway, I hope this info saves somebody else the pain I've been through Jeremy -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] SC.exe equivalent in Samba?
Hello everyone, I'm trying to determine if there is an equivalent to the WinXP/Vista/ Server command SC.exe (service control). From what I have gleaned, the svcctl API in Samba tries to replicate the other direction (controlling a Samba server's services/inits from Windows/MMC) but I'm looking to control a Windows server's services from (in my case) Linux. Essentially, I'm looking for an SC.exe equivalent in Samba. Could anyone point me in the right direction? Thanks, Graham. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Users groups are not synchronized with Samba
Currently I am using Samba with ACL control. My problem is that if I add or remove users from a group, those changes are not reflected for samba access until I restart the samba server. Example of what I mean. GroupA and GroupBUSER is part of no group. Unix: I give GroupA full access to FOLDER Windows: as USER I try and access FOLDER I get permission denied. Unix: I add USER to GroupA Windows: as USER I try and access FOLDER I get permission denied! Unix: I restart Samba server Windows: as USER I try and access FOLDER I get full access. This is definitely not going to work for me. I created an web application that gives me full control over samba and unix users so I can manage user/group permissions for all files and directories in my fileserver. If i have to restart the samba server every time I change somebodies group this is going to be chaos where I work. Adding users to files/folders works fine, its just when I add users to groups that Samba doesn't recognize that users new group until I restart. anyone have any idea how I can solve this issue? is this a Samba parameter that I need to make sure Samba konws when users move around to different groups? Thanks -Ray -- Raymond Holguin Programmer Analyst College of Humanities, Arts, and Social Sciences Tel: (951) 827-6212 Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] How to give user access to only 1 directory on a share?
Yes, use ACL's and all the files and directories that the user should NOT access set the ACL to somethign like setfact -m u:USER_NAME:- DIRECTORY_NAME that will say that even if the directory is 777, that particular user has no access whatsoever. The directory that he/she is allowed to access should stay the same. Matt Lozier wrote: Hello, Is there a way to give a single user access to a single directory on a given share, and yet prevent that user from accessing the rest of the data on that share? All users on the system are within the *same* group, and if possible, I'd like to keep it this way. Would I have to go with ACLs to implement this? Any and all suggestions are appreciated! Thanks, Matt -- Raymond Holguin Programmer Analyst College of Humanities, Arts, and Social Sciences Tel: (951) 827-6212 Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] W2K3 server unable to join samba PDC
Hi Winanjaya, Could you post the solution here for others with the same problem please. Thank you, Winanjaya wrote: Thanks, but this problem resolved already.. Regards Winanjaya New Page 1 - Original Message - From: Tim Boneko [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Monday, January 08, 2007 11:48 PM Subject: Re: [Samba] W2K3 server unable to join samba PDC Winanjaya - CBN schrieb: I am running samba (samba-3.0.21b-2) as PDC on FC5 .. why my Windows 2003 Server x64 (R2) unable to join to samba domain? .. pls help Do you expect us to visit you? Post some info (e.g. logs) and you might be helped. timbo -- Die Briefmarken einer Sammlung wirbeln bei plötzlichem Durchzug nicht mehr wirr durcheinander, wenn man mehrere Tuben Klebstoff über ihnen ausdrückt. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba *** Our outgoing mail has been scanned by MSS. ***-*** -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- View this message in context: http://www.nabble.com/W2K3-server-unable-to-join-samba-PDC-tp8212670p15950557.html Sent from the Samba - General mailing list archive at Nabble.com. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] CENTOS4.6+SAMBA3.0.25+FEDORA-DS
Guys , I still got stuck at the net groupmap add Please have a look what I've done wrong or miss any prerequisite steps. Below this is where I got stuck: [EMAIL PROTECTED] /opt/fedora-ds/slapd-tompdc]# smbpasswd -w myldapadminpassword Setting stored password for cn=manager,dc=mycompany,dc=com in secrets.tdb [EMAIL PROTECTED] /opt/fedora-ds/slapd-tompdc]# service smb restart Shutting down SMB services:[ OK ] Shutting down NMB services:[ OK ] Starting SMB services: [ OK ] Starting NMB services: [ OK ] [EMAIL PROTECTED] groupadd domainadmins [EMAIL PROTECTED] /opt/fedora-ds/slapd-tompdc]# net groupmap add rid=2512 ntgroup='Domain Admins' unixgroup='domainadmins' type=d [2008/03/11 16:18:26, 0] lib/smbldap.c:smbldap_connect_system(977) failed to bind to server ldap://192.168.1.7 with dn=cn=manager,dc=mycompany,dc=com Error: No such object adding entry for group Domain Admins failed! *** I already have populated ldap directory with dc=mycomputer,dc=com *** Added domain into ldap directory This is my ldap directory -com == This my smb.conf [global] workgroup = MYDOMAIN security = user passdb backend = ldapsam:ldap://192.168.1.7 ldap admin dn = cn=manager,dc=mycompany,dc=com ldap suffix = dc=mycompany,dc=com ldap user suffix = ou=People ldap machine suffix = ou=Computers ldap group suffix = ou=Groups log file = /var/log/%m.log socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 os level = 33 domain logons = yes domain master = yes local master = yes preferred master = yes wins support = yes logon home = \\%L\%u\profiles logon path = \\%L\profiles\%u logon drive = H: template shell = /bin/false winbind use default domain = no [netlogon] path = /var/lib/samba/netlogon read only = yes browsable = no [profiles] path = /var/lib/samba/profiles read only = no create mask = 0600 directory mask = 0700 [homes] browsable = no writable = yes Please advise. Thank you and Best Regards, Tom John H Terpstra wrote: On Wednesday 05 March 2008 12:32:14 am suphakit Chamwuthipricha wrote: Hi I am new to linux Samba. I would like to setup Samba as a domain controller and using Fedora-ds for authentication. That is a VERY ambitious project fro someone who is new to Linux and new to Samba. It is a little bit like picking up a manual on brain surgery and going straight into the operating theatre. Please note that Linux and Samba are potentially complex tools. While most simple things can be done with little effort, getting into technically complex areas like directory services and domain control takes you into a very specialized realm for which a good deal of understanding is important. I have read some documents from www.samba.org but I am still in the mist. Most people on this list are very happy to help someone who is new to the game. When posting questions, it is good etiquet to keep the overall message short and to provide enough information so that others can see that you have prepared yourself as much as you could. Please don't say some information - spell it out. Which documents did you read? Here is my dumb questions about Samba as follows. Well, here are my simple answers - but I suspect they will nto help you too much. 1. Is CENTOS4.6+SAMBA3.0.25 as PDC +FEDORA-DS possible? Samba can use most LDAP servers. It is certainly possible to use Fedora-DS. 2. Is this HOWTO from http://directory.fedoraproject.org/wiki/Howto:Samba sufficient information? please suggest more That is not a Samba document. I suspect that very few people on this list would have seen that document, but I may be wrong. I checked the information on the Fedora Project Wiki - it looks quite enough to get a system running - if you know what you are doing. I would recommend that you start with the Samba3-ByExample book. Work your way through chapters 1-5. What you learn will help you when you are ready for more complex projects. If you have a problem with any of the examples in the book - ask for help on this list. 3. Since I tried to integrate Samba+Fedora-ds ,I am always stuck at this step net groupmap add. If this command fails, it means that you most likely have a communication problem with the LDAP server. Does these command need to be done? What will happen if we skip them? Yes, they are necessary. If you don't do this there will be no Windows groups for your Windows clients. # net groupmap add rid=2512 ntgroup='Domain Admins' unixgroup='Domain Admins' # net groupmap add rid=2513 ntgroup='Domain Users' unixgroup='Domain Users' # net groupmap add rid=2514
[Samba] First file download from samba dead slow (fwd)
Hi there, has anyone else stumbled upon this problem? -- Forwarded message -- Date: Thu, 6 Mar 2008 10:38:51 +0200 (EET) From: Harald Hannelius [EMAIL PROTECTED] To: Debian Bug Tracking System [EMAIL PROTECTED] Subject: First file download from samba dead slow Package: samba Version: 3.0.24-6etch9 Severity: important Etch server running samba (amd64) as domain member. SMP. Windows XP SP2 client, logged on to samba domain. When copying a file from the Samba-server download speed is terrible, estimate 10-15 minutes for a ~150MB file. Connectivity between computers ok. iperf says 92Mbit/s, scp (cygwin) copies the same file from the same etch-server in under 10s 7-8MByte/s. Downloading with firefox on windows using file:///server/share/... gets around 120KB/sec, as does copying the file in Windows Explorer. copy in cmd.exe is slow too. Copying is slow both from UNC-paths and from a mapped drive. However, if I in the same session start copying another file, the download speed increases massively and the download takes just ~20s or less. It is even enough if I use smbclient from another computer to download any other file, while that download is running both instances are fast, until the other stops. After this the remaining download is slow again, and the estimate fron Windows Explorer starts ticking minutes. It is even enough if a another domain user, using another client windows-computer starts a download of another file and both instances speed up. I built a samba-3.0.28 packages (sid) and installed that, no avail. I have been playing around with different socket options to no avail. -- smb.conf follows - [global] deadtime = 15 # max xmit = 65535 # getwd cache = yes # socket options = SO_KEEPALIVE TCP_NODELAY aio read size = 16384 socket options = TCP_NODELAY SO_SNDBUF=8129 SO_RCVBUF=8192 # socket options = TCP_NODELAY SO_SNDBUF=4096 SO_RCVBUF=4096 netbios name = atrium debug level = 0 workgroup = nova server string = Intranet load printers = no log file = /var/log/samba/log.%m max log size = 100 security = domain password server = domus encrypt passwords = true local master = no os level = 65 preferred master = no utmp = yes syslog = 0 unix extensions = yes dos charset = ISO8859-15 unix charset = ISO8859-1 display charset = ISO8859-15 [intra] path = /tftpboot/intra comment = Nova Intranet guest ok = no browseable = yes read only = no write list = @domadm invalid users = root altiuser directory mode = 2775 create mask = 0665 directory mask = 2775 - smb.conf ends -- -- System Information: Debian Release: 4.0 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.18-6-amd64 Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Versions of packages samba depends on: ii deb 1.5.11etch1 Debian configuration management sy ii lib 2.2.41-1 Access control list shared library ii lib 2.4.32-1 Extended attribute shared library ii lib 2.3.6.ds1-13etch5GNU C Library: Shared libraries ii lib 1.39+1.40-WIP-2006.11.14+dfsg-2etch1 common error description library ii lib 1.2.7-4etch2 Common UNIX Printing System(tm) - ii lib 1.4.4-3 the GNU TLS library - runtime libr ii lib 1.4.4-7etch4 MIT Kerberos runtime libraries ii lib 2.1.30-13.3 OpenLDAP libraries ii lib 0.79-5 Pluggable Authentication Modules f ii lib 0.79-5 Runtime support for the PAM librar ii lib 0.79-5 Pluggable Authentication Modules l ii lib 1.10-3 lib for parsing cmdline parameters ii log 3.7.1-3 Log rotation utility ii lsb 3.1-23.2etch1Linux Standard Base 3.1 init scrip ii net 4.29 Basic TCP/IP networking system ii pro 1:3.2.7-3/proc file system utilities ii sam 3.0.24-6etch9Samba common files used by both th ii zli 1:1.2.3-13 compression library - runtime Versions of packages samba recommends: pn smbldap-tools none (no description available) -- debconf information: samba/run_mode: daemons samba/tdbsam: false samba/generate_smbpasswd: true -- A: Top Posters Q: What is the most annoying thing on mailing lists? Harald H Hannelius | harald/a\arcada.fi | GSM +358 50 594 1020 -- To unsubscribe from this list go to the following URL and read the
[Samba] chdir (/var/lib/samba/profiles) failed
L.S. I've some problems on a couple of my samba servers. The servers running CentOS release 5 with samba-3.0.25b-1.el5_1.4 The config is pretty standard, not much special in it. But the log files are filling up with error messages like this one: [2008/03/12 17:08:47, 0] smbd/service.c:set_current_service(184) chdir (/var/lib/samba/profiles) failed On the clients (all windows XP) are covered in error messages to like: Network name is no longer available These error messages are mainly when copying / saving / opening large files, +10Mb. Does anyone have a suggestion? I've search mailing lists and google, but didn't find an real answer on this question. Any help is welcome! Thanks in advanced. Joris Cras -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] msdfs root -- client error refers to a location thatisunavailable
Hi, I have a msdfs samba root on a Centos server , authentication with winbind + Active Directory in a windows domain. Everything is working fine and it's true you have to reboot your XP computer to be sure to reach the dfs root. On my Xp client , i see the links in the msdfs root as dfs folders (in the windows explorer) My problem wich seems to be like yours : If a take the same XP client connected via a ssh connection ( i use the port forwarding option for the samba port 139) then i can't access the dfs root (though i can reach the shares with no problem) and on the Windows explorer, the dfs links are no more recognised as dfs folders and i can't connect . In my samba log i also have the path does not exist error. If i open a full vpn connection (not only the ssh port forwarding for the port 139) then evrything is working again, the dfs links are recognised as dfs folders in windows explorer. Your problem and mine is something around there. An authentification problem and then the XP client doesn't understand he is facing a dfs link . Is there a way to fix this ?? To tell XP to always consider such a place in the network as a dfs share ?? I tried the xp patched dealing with dfs but nothing changed? Anyone can help ? Reagrds David - Original Message - From: Paul B. Henson [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Friday, March 14, 2008 11:43 PM Subject: Re: [Samba] msdfs root -- client error refers to a location thatisunavailable I still haven't been able to figure this out; and haven't seen any responses to my inquiry. One of my colleagues wanted to host the Dfs root on an actual Windows server, which seems to work fine. I was hoping to keep an all Samba solution, but I guess I will have to let him have his way. Clearly samba Dfs root support works for some people; it is rather frustrating that it's not working here for no apparent reason. On Tue, 11 Mar 2008, Paul B. Henson wrote: I'm trying to get Samba 3.0.28 to work as an MS Dfs root providing a share that links home directories to the actual servers they reside on. Unfortunately, when I access the share from a Windows XP client, and try to open one of the directories, the client gives an error that it refers to a location that is unavailable. I've done a lot of searching, and found a number of similar issues raised, but sadly no real resolutions. Samba was attached to our active directory domain with net ads join, which worked perfectly and authentication seems fine. My configuration is as follows: - [global] allow trusted domains = no deadtime = 10 debug pid = yes disable netbios = yes lanman auth = no load printers = no log level = 1 map archive = no name resolve order = host passdb backend = tdbsam realm = WIN.CSUPOMONA.EDU restrict anonymous = 2 security = ads server signing = auto show add printer wizard = no smb ports = 445 workgroup = WIN max log size = 512000 [user] msdfs root = yes path = /var/lib/samba/shares/user - I'm only running smbd, not nmbd, as I don't want to use NetBIOS naming. The server is being accessed with a fully qualified name '\\files.unx.csupomona.edu\user'. In the configured share directory, I made a symbolic link as documented: lrwxrwxrwx 1 root root 35 Mar 10 16:26 henson - msdfs:zfs1.unx.csupomona.edu\henson I'm pretty sure the Samba configuration itself is okay, accessing the share with smbclient works correctly and appropriately follows the link. With debugging enabled, I also see the following message logged: [2008/03/11 15:10:29, 5, pid=28793] smbd/msdfs.c:is_msdfs_link(337) is_msdfs_link: ./henson - msdfs:zfs1.unx.csupomona.edu\henson When I try to access it from a Windows client though, I do see this in the debug log: [2008/03/11 15:16:19, 5, pid=28904] smbd/trans2.c:get_lanman2_dir_entry(1215) get_lanman2_dir_entry: Masquerading msdfs link ./henson as a directory I'm not sure that's normal, but seems odd. I'm not sure what all to attach from the debug log, it is rather large. The following seems associated with that request though: size=86 smb_com=0x32 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=24 smb_flg2=51207 smb_tid=1 smb_pid=3264 smb_uid=103 smb_mid=2432 smt_wct=15 smb_vwv[ 0]= 18 (0x12) smb_vwv[ 1]=0 (0x0) smb_vwv[ 2]= 10 (0xA) smb_vwv[ 3]=16384 (0x4000) smb_vwv[ 4]=0 (0x0) smb_vwv[ 5]=0 (0x0) smb_vwv[ 6]=0 (0x0) smb_vwv[ 7]=0 (0x0) smb_vwv[ 8]=0 (0x0) smb_vwv[ 9]= 18 (0x12) smb_vwv[10]= 68 (0x44) smb_vwv[11]=0 (0x0) smb_vwv[12]=0 (0x0) smb_vwv[13]=1 (0x1) smb_vwv[14]=1 (0x1) smb_bcc=21 I think the following messages correspond to the error I am receiving from the client: [2008/03/11 15:16:26, 3, pid=28904]
[Samba] getting 0x00000057 on Vista
Hi, I'm getting 0x0057 when trying to install a printer on Vista clients from a Samba hosted printer server. The packet traces shows the last transaction is GetPrinterDriver2, but I just don't see what's invalid in the reponse. I have tried 3.0.22, 3.0.26a, and 3.0.28 and they all give me the same error. Can someone please help? Thanks! --MingJ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] msdfs root -- client error refers to a locationthatisunavailable
Hi, I found one of my problems (it solved my problem on a computer that never had seen the Windows domain). It's a name resoltution problem , the dfs links are pointing to \\Data\x... I have to put : A.B.C.D Data #PRE in the lmhosts file of my Windows XP client (A.B.C.D is the ip address of the Data computer). and then it's working (I first forget to put #PRE ans it was not working). - Original Message - From: Paul B. Henson [EMAIL PROTECTED] To: TEXIER David [EMAIL PROTECTED] Cc: samba@lists.samba.org Sent: Monday, March 17, 2008 11:49 PM Subject: Re: [Samba] msdfs root -- client error refers to a locationthatisunavailable On Sat, 15 Mar 2008, TEXIER David wrote: If a take the same XP client connected via a ssh connection ( i use the port forwarding option for the samba port 139) then i can't access the dfs root (though i can reach the shares with no problem) and on the Windows explorer, the dfs links are no more recognised as dfs folders and i can't connect . [...] Your problem and mine is something around there. There seems to be some undefined set of circumstances which a Windows client requires to be aligned before considering a server a DFS root :(... At this point I guess I'm going to have to let the Windows guys serve up the DFS root, as I've had no luck getting the samba server working. -- Paul B. Henson | (909) 979-6361 | http://www.csupomona.edu/~henson/ Operating Systems and Network Analyst | [EMAIL PROTECTED] California State Polytechnic University | Pomona CA 91768 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Vista Read/Write performance
Hello. I am setting up a smb server running debian etch for a small office. Due to circumstances outside my control, most of the client machines are running Windows Vista Ultimate. The shares are all set up properly, security is set, and we're good to go. Except that the throughput from any of the Vista machines to the server is at best slow and at worst abysmal. After tweaking the socket options, turning off various services in windows (Remote Differential Compression), and even installing the freshly-released SP1, the best I've been able to get is 12.5 MB/s reading from the samba server. SCP gets 35-40 MB/s, and Vista to Vista transfers using SMB get 35-40 MB/s. I'm in the unfortunate position of having to recommend to my boss that we put the data on another Vista machine and use that as a makeshift file server until this problem can be ironed out. I very much do not want to tell him that. Any help anyone can offer would be greatly appreciated. Thank you, Matt Harris smb.conf excerpt below. [global] workgroup = UTOPIA server string = %h (file server) obey pam restrictions = Yes passdb backend = tdbsam passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* . client NTLMv2 auth = Yes log file = /var/log/samba/log.%m max log size = 1000 smb ports = 445 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 load printers = No os level = 250 lm announce = Yes preferred master = Yes domain master = No dns proxy = No ldap ssl = no panic action = /usr/share/samba/panic-action %d invalid users = root write cache size = 65536 include = /etc/samba/dhcp.conf [shares here] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] unable to run net rpc join
Can some one help me out in joining 3.0.28a to domain. When i run ./net rpc join -U administrator I'm getting error Unable to find a suitable server. I have logged a bug in bugzilla #5328. Logs and smb.conf file are attached in bugzilla. In fact with 3.0.28a I'm able to join 2003 server with ./net rpc join -U administrator command with out any problem. Also I'm able to join 3.0.28a to active directory. ./net ads join -U administrator is successful. Any help in this regard will be appreciated. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
AW: [Samba] LDAP Logon Script Management
-Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Auftrag von Asier Baranguán Gesendet: Mittwoch, 19. März 2008 00:12 An: samba@lists.samba.org Betreff: Re: [Samba] LDAP Logon Script Management El Martes, 18 de Marzo de 2008, Mark Rutherford escribió: What I have done, since users don't need individual scripts is tie a script to a group because different groups have different printers and such. I use Kixtart for this... so yes the scripts are elaborate but once it's done I have had little reason to poke around in them. I've a similar kind of setup with KIX32 and logon scripts with symlinks, and use wpkg to distribute software. Anyone can help me with startup scripts (not logon scripts)? So software can be deployed to machines independent of the logged user privileges? I've looked a setup with WPKG Client but: A) It must run under a user with administrative privileges on the local machine and the password is in a XML file. Not very secure. B) Must run with the SYSTEM account, so no access to samba shares because deployed software can't have public access. Hi, we use OPSI (www.opsi.org) to distribute software and unattended OS install. Give it a try. Andreas Pohl [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Numerous LDAP Queries
Hello All, Since upgrading to Samba 3.0.25 (RHEL4) from 3.0.9 (RHEL4) I've been noticing an increase in the number of ldap queries for group accounts that I have listed as invalid accounts in the smb.conf. The queries occur roughly every two minutes. I have one primary Samba DC and two secondary DC that geographically separate. The queries are generated by the secondary DC's to the primary DC. And I've been noticing numerous queries for what should be the MS Windows BuiltIn groups (S-1-5-32-544 thru S-1-5-31-546). I know it is not much but the frequency of the queries keep the ldap log file quite large (~300Mb/wk). Marcus O. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] WinXP x64 + Centos 5.1 + Samba
Hi, I have a couple workstations running WinXP x64 that connect to a few servers running Centos 5.1 with Samba version 3.0.25b. I'm experiencing this really strange problem with two of the boxes. Two of them have 3ware RAID cards with XFS partitions. I export the partion across both NFS and SMB. These are the two that I'm having problems.with. When I save a large file through an application or if I copy a large group of files - WinXP crashes - either by freezing or BSOD. However the odd thing is that I can copy a folder just fine. It only happens when I save a large file or copy a bunch of files. I've checked my network setup. There's either no or a very small amount of collision on the network. I've removed the VLAN and put it on a flat network. I've unbonded the bonded interface. I've tried it with oplocks on and off - it almost makes no difference. Copying via SMB on a mac works just fine. I can also copy from my laptop running regular WinXP just fine. It seems like something specific to WinXP x64 - but I can't track down what it is. At this point, I've pretty much exhausted every option that I can think of. Has anyone ran into a similar issue? Or does anyone have any suggestions as to how to track down the issue? Thanks, Hai -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] help with running tests in the ctdb/tests folder....
I am trying to run the ctdb/tests/run_tests.sh batch file. I noticed that nodes.txt has the following localhost type ip addresses: 127.0.0.1 127.0.0.2 127.0.0.3 127.0.0.4 and the public addresses has some other addresses: 10.99.99.0/24 10.99.99.1/24 10.99.99.2/24 10.99.99.3/24 I reckon I need to change the public addresses to valid addresses on my network, but what about the nodes.txt file? Why 127.0.0.x addresses? Also, what are the differences between FETCH, BENCH, and CTDB batch script files? Is there any documentation on this stuff? Also, what is the smnotify utlity file used for? and how does one use it? Thanks in advance. Michael Vitale -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problem in working with domain DFS links
Hi,
First, I will try to make my terminology clear:
There are two things MS calls DFS:
1. Server/share DFS - in this case you can define a virtual
server/share that when a client tries to connect to, the server will
direct it to another, real, server/share to which the client should
connect. The virtual server/share may contain one or more real
server/share pairs and the decision in the client to which to connect is
based on location, load balancing, etc.
2. Directory DFS - in this case you can define that a certain
directory inside your share will be actually a link to another
server/share and not a real directory. This is something similar to the
Linux directory in which dirs may be actually mount points.
The issue is that when a client works with the server/share DFS it will
actually use the virtual server name inside its SMBs request. Samba
handles most of them correctly, but in the handling of
Trans2/GET_DFS_REFERRAL it does not. In this action it actually makes
sure that the server name in the request is the name of the computer
running the Samba server - which causes DFS referral to fail. See frames
1172 and 1195 in the attached TCP-dump.
On the other hand, for Trans2/QUERY_PATH_INFO for the same path Samba
does not fail the request based on the server name. See frames 1132 and
1195 in the TCP-dump.
When looking inside the Samba code (I've looked and tested 3.0.23c but
it seems to be the same also 3.0.25b and 3.0.28) it looks that msdfs.c,
in the function get_referred_path is making sure the server name in the
path is the same as the current machine in which Samba is running.
When removing the following lines everything works OK:
/* Verify hostname in path */
if (!is_myname_or_ipaddr(dp.hostname)) {
DEBUG(3, (get_referred_path: Invalid
hostname %s in path %s\n,
dp.hostname, dfs_path));
return NT_STATUS_NOT_FOUND;
}
Is there a reason for this checking inside get_referred_path? If not, I
will be happy to supply the above suggest patch.
Best regards,
Ofir.
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Force User based on directory name
Hi, Is there a way that I can force the user based on the directory name? I have administrators who need to place files in the [homes] directories of multiple users, and I need the user of all the files to be based on the name of the directory (the user cannot be administrator even when the administrator puts the file in), so that the user can access the files in his or her [homes]. Any help is appreciated! Thanks! -- View this message in context: http://www.nabble.com/Force-User-based-on-directory-name-tp16307118p16307118.html Sent from the Samba - General mailing list archive at Nabble.com. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Migrating from 32 to 64 bit with TDB sam
Hi, I'm using a TDB sam and will migrate our server from 32 to 64 bit in the next few days. I wonder if the TDB databases can be copied from 32bit arch to 64bit. If not, what is the best way ? Thanks Laurent -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] get Samba Server via VPN from windows XP
Hi, I have network in my office with Samba server on Debian Linux. I would like to get the folders and files in this server from my home with Windows XP. So, I done the VPN connection. I think, it works good. In the VPN connection Samba Server's ip address is 192.168.2.1 and net mask is 255.255.255.255. The client's ip address is 192.168.2.6. and netmask is 255.255.255.252. I can ping the server from the client and back too. The workgrupname in the smb.conf and windows XP are same. The problem is that I can't see the linux computer in the network place on the Windows XP. Why? Sincerely, Zoli -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] get Samba Server via VPN from windows XP
Hi, I have network in my office with Samba server on Debian Linux. I would like to get the folders and files in this server from my home with Windows XP. So, I done the VPN connection. I think, it works good. In the VPN connection Samba Server's ip address is 192.168.2.1 and net mask is 255.255.255.255. The client's ip address is 192.168.2.6. and netmask is 255.255.255.252. I can ping the server from the client and back too. The workgrupname in the smb.conf and windows XP are same. The problem is that I can't see the linux computer in the network place on the Windows XP. Why? Sincerely, Zoli -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] smbd oops
I wasn't doing anything .. really! ;-) ..but I got this Oops with process = smbd. (Using samba-3.0.28-0.fc7) Is is a samba problem? Mar 30 12:26:39 jgs kernel: Oops: [1] SMP Mar 30 12:26:39 jgs kernel: CPU 0 Mar 30 12:26:39 jgs kernel: Modules linked in: ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 xt_state nf_conntrack nfnetlink ipt_REJECT xt_tcpudp iptable_filter ip_tables x_tables bridge autofs4 w83627ehf hwmon_vid eeprom hidp fuse rfcomm l2cap bluetooth sunrpc kqemu(U) dm_multipath video output sbs battery ac ipv6 snd_via82xx_modem snd_usb_audio snd_usb_lib snd_hwdep snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_via82xx snd_ac97_codec snd_pcm_oss snd_mpu401 ac97_bus snd_mixer_oss snd_mpu401_uart snd_rawmidi ns558 parport_pc snd_pcm snd_seq_device parport gameport snd_timer i2c_viapro k8temp hwmon pcspkr snd i2c_core soundcore snd_page_alloc floppy sky2 button shpchp sg sr_mod cdrom dm_snapshot dm_zero dm_mirror dm_mod pata_via ata_generic sata_via libata sd_mod scsi_mod raid456 async_xor async_memcpy async_tx xor raid1 ext3 jbd mbcache ehci_hcd ohci_hcd uhci_hcd Mar 30 12:26:39 jgs kernel: Pid: 22305, comm: smbd Not tainted 2.6.23.15-80.fc7 #1 Mar 30 12:26:39 jgs kernel: RIP: 0010:[81079004] [81079004] __inc_zone_state+0xc/0x5b Mar 30 12:26:39 jgs kernel: RSP: 0018:810019a479f0 EFLAGS: 00010046 Mar 30 12:26:39 jgs kernel: RAX: RBX: 81000102d6b8 RCX: 0005 Mar 31 12:26:39 jgs kernel: RDX: 81000102d6b8 RSI: 0005 RDI: Mar 30 12:26:39 jgs kernel: RBP: R08: 00e61000 R09: Mar 30 12:26:39 jgs kernel: R10: 81000100 R11: 81000100 R12: 8100022477d8 Mar 30 12:26:39 jgs kernel: R13: 0031 R14: 81000349d600 R15: 88038b37 Mar 30 12:26:39 jgs kernel: FS: 2f132e50() GS:813b5000() knlGS:f7fc26d0 Mar 30 12:26:39 jgs kernel: CS: 0010 DS: ES: CR0: 8005003b Mar 30 12:26:39 jgs kernel: CR2: 0050 CR3: 11d46000 CR4: 06e0 Mar 30 12:26:39 jgs kernel: DR0: DR1: DR2: Mar 30 12:26:39 jgs kernel: DR3: DR6: 0ff0 DR7: 0400 Mar 30 12:26:39 jgs kernel: Process smbd (pid: 22305, threadinfo 810019a46000, task 8100199bc000) Mar 30 12:26:39 jgs kernel: Stack: 8106ed7c 81000102d7d0 81000102d6e0 81000102d6b8 Mar 30 12:26:39 jgs kernel: 000b 810019a47c28 810bd934 88038b37 Mar 30 12:26:39 jgs kernel: 0296 8100022477d8 0007 Mar 30 12:26:39 jgs kernel: Call Trace: Mar 30 12:26:39 jgs kernel: [8106ed7c] add_to_page_cache+0x7d/0x93 Mar 30 12:26:39 jgs kernel: [810bd934] mpage_readpages+0x85/0x12d Mar 30 12:26:39 jgs kernel: [88038b37] :ext3:ext3_get_block+0x0/0xe4 Mar 30 12:26:39 jgs kernel: [8107376f] __alloc_pages+0x71/0x2d3 Mar 30 12:26:39 jgs kernel: [81075310] __do_page_cache_readahead+0x13a/0x20a Mar 30 12:26:39 jgs kernel: [8121ed22] tcp_transmit_skb+0x72d/0x76a Mar 30 12:26:39 jgs kernel: [811e6dd0] memcpy_toiovec+0x36/0x66 Mar 30 12:26:39 jgs kernel: [880ef90d] :dm_mod:dm_table_any_congested+0x46/0x63 Mar 30 12:26:39 jgs kernel: [81075633] ondemand_readahead+0xf1/0xf8 Mar 30 12:26:39 jgs kernel: [8106f03a] do_generic_mapping_read+0x126/0x3f7 Mar 30 12:26:39 jgs kernel: [8106e796] file_read_actor+0x0/0x18a Mar 30 12:26:39 jgs kernel: [810707d1] generic_file_aio_read+0x11d/0x160 Mar 30 12:26:39 jgs kernel: [81097810] do_sync_read+0xc9/0x10c Mar 30 12:26:39 jgs kernel: [810a547d] vfs_test_lock+0x2e/0x32 Mar 30 12:26:39 jgs kernel: [81047ce9] autoremove_wake_function+0x0/0x2e Mar 30 12:26:39 jgs kernel: [810a0201] lookup_one_len_kern+0x73/0xf2 Mar 30 12:26:39 jgs kernel: [81098087] vfs_read+0xcb/0x173 Mar 30 12:26:39 jgs kernel: [8109854f] sys_pread64+0x50/0x70 Mar 30 12:26:39 jgs kernel: [8100bcd1] tracesys+0x71/0xda Mar 30 12:26:39 jgs kernel: [8100bd35] tracesys+0xd5/0xda Mar 30 12:26:39 jgs kernel: Mar 30 12:26:39 jgs kernel: Mar 30 12:26:39 jgs kernel: Code: 48 8b 44 c7 50 4c 8d 44 08 42 41 8a 10 ff c2 41 88 10 8a 40 Mar 30 12:26:39 jgs kernel: RIP [81079004] __inc_zone_state+0xc/0x5b Mar 30 12:26:39 jgs kernel: RSP 810019a479f0 Mar 30 12:26:39 jgs kernel: CR2: 0050 Mar 30 12:29:30 jgs syslogd 1.4.2: restart. Mar 30 12:29:30 jgs kernel: klogd 1.4.2, log source = /proc/kmsg started. Mar 30 12:29:30 jgs kernel: Linux version 2.6.23.15-80.fc7 ([EMAIL PROTECTED]) (gcc version 4.1.2 20070925 (Red Hat 4.1.2-27)) #1 SMP Sun Feb 10 16:52:18 EST 2008 Mar 30 12:29:30 jgs kernel: Command line: ro root=/dev/G271/Vf7 rhgb (please cc replies as I am not presently
[Samba] Username case mangling: Linux username is mixed-case, Samba returns lower-case
I have a problem that I first observed when I upgraded from 3.0.24 to 3.0.28 and is, I believe, related to the introduction of the printjob username configuration parameter. I print via CUPS and the Cups-PDF driver wants to know the Linux username (so it can put the PDF in the proper location). The problem is that printjob username = %U results in a lowercase username (steve), even though the Linux account is Steve. The Samba logs clearly show me authenticating as Steve and the last message I see (with logging at 20) with an obvious user name shows me connecting to the Cups-PDF printer share with username Steve. But, the Cups logs show a username of steve -- which ends up mapped to anonymous. I see I'm not the first to observe this change: http://www.mail-archive.com/samba@lists.samba.org/msg85076.html Linux prints fine to Cups-PDF, the username in the Cups logs is shown as Steve, and the older samba (3.0.24 on Fedora Core 6) printed fine with username Steve, it just seems to be the newer Samba is lowercasing the username. %U give steve, %u, %$USER, %$(USER) are all taken literally (i.e. %u gives %u). Is there anyway to get Samba to output the *real* Linux username? As an aside while checking the samba documentation, I saw references to how Linux usernames should always be all lower case. Why? I've had mixed-case names for over 6 years and am unaware of any problems until now. Certainly, standard tools let you create mixed-case usernames without complaint. TIA, Steve Special deal for Yahoo! users friends - No Cost. Get a month of Blockbuster Total Access now http://tc.deals.yahoo.com/tc/blockbuster/text3.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Vista Read/Write performance
On Tue, Mar 18, 2008 at 6:57 PM, Matt Harris [EMAIL PROTECTED] wrote: Hello. I am setting up a smb server running debian etch for a small office. Due to circumstances outside my control, most of the client machines are running Windows Vista Ultimate. The shares are all set up properly, security is set, and we're good to go. Except that the throughput from any of the Vista machines to the server is at best slow and at worst abysmal. After tweaking the socket options, turning off various services in windows (Remote Differential Compression), and even installing the freshly-released SP1, the best I've been able to get is 12.5 MB/s reading from the samba server. SCP gets 35-40 MB/s, and Vista to Vista transfers using SMB get 35-40 MB/s. I'm in the unfortunate position of having to recommend to my boss that we put the data on another Vista machine and use that as a makeshift file server until this problem can be ironed out. I very much do not want to tell him that. Any help anyone can offer would be greatly appreciated. Thank you, Matt Harris Since this email is old (I got it in my mailbox today though) you probably figured it out but I will ask anyways. Are you using samba-3.0.28a? John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Vista Read/Write performance
On Tue, Mar 18, 2008 at 03:57:16PM -0700, Matt Harris wrote: Hello. I am setting up a smb server running debian etch for a small office. Due to circumstances outside my control, most of the client machines are running Windows Vista Ultimate. The shares are all set up properly, security is set, and we're good to go. Except that the throughput from any of the Vista machines to the server is at best slow and at worst abysmal. After tweaking the socket options, turning off various services in windows (Remote Differential Compression), and even installing the freshly-released SP1, the best I've been able to get is 12.5 MB/s reading from the samba server. SCP gets 35-40 MB/s, and Vista to Vista transfers using SMB get 35-40 MB/s. I'm in the unfortunate position of having to recommend to my boss that we put the data on another Vista machine and use that as a makeshift file server until this problem can be ironed out. I very much do not want to tell him that. Any help anyone can offer would be greatly appreciated. Try loading the readahead vfs module on the shares Vista is accessing. I'm assuming the Samba code is on Linux ? Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] smb.conf parameter additions not in man page
From the 3.0.28a release notes: == smb.conf changes Parameter Name Description Default -- --- --- administrative shareNew No ldap debug levelNew 0 ldap debug thresholdNew 10 == Yet none of those additions show up in the smb.conf man page. -- Chris -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Users groups are not synchronized with Samba
On 3/7/2008, Raymond Holguin ([EMAIL PROTECTED]) wrote: Unix: I add USER to GroupA Windows: as USER I try and access FOLDER I get permission denied! Unix: I restart Samba server Windows: as USER I try and access FOLDER I get full access. Did the User log out then back in? Even in the Windows world, this is how it works. The Users Permissions are applied at Logon time, so any change in Group Membership will not show up unless/until the User logs out and back in. This may have changed with Server 2008, but I can't say becasue I haven't had time to test it... -- Best regards, Charles -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] smb.conf parameter additions not in man page
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris Smith wrote: From the 3.0.28a release notes: == smb.conf changes Parameter Name Description Default -- --- --- administrative shareNew No ldap debug levelNew 0 ldap debug thresholdNew 10 == Yet none of those additions show up in the smb.conf man page. Grab the daily docs tarball from http://www.samba.org/~samba-bugs/docs/ cheers, jerry - -- = Samba--- http://www.samba.org Likewise Software - http://www.likewisesoftware.com What man is a man who does not make the world better? --Balian -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFH8Q+XIR7qMdg1EfYRArHCAJ9hO0H3ibnvIYnwn/HmUev8VbkfHQCcDtLv WF2d0q+htzgUgTpTt4L8nt8= =mElW -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] samba and unix groups problem
Hi, I've installed samba (samba-3.0.28) on freebsd 7.0 (amd64) box. Everything is ok except that if user belong to more than 15 groups, user cannot log to samba share (and use it). I tried to goolge something but haven't found any solution to this. This is from dmesg -a: Mar 31 18:10:53 srv1 smbd[51390]: [2008/03/31 18:10:53, 0] lib/system_smbd.c:getgroups_unix_user(172) Mar 31 18:10:53 srv1 smbd[51390]: get_user_groups: failed to get the unix group list Mar 31 18:10:53 srv1 smbd[51390]: [2008/03/31 18:10:53, 0] auth/auth_sam.c:check_sam_security(352) Mar 31 18:10:53 srv1 smbd[51390]: check_sam_security: make_server_info_sam() failed with 'NT_STATUS_NO_SUCH_USER' Could someone tell me what I'm doing wrong? thanks Trigve Special deal for Yahoo! users friends - No Cost. Get a month of Blockbuster Total Access now http://tc.deals.yahoo.com/tc/blockbuster/text3.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Vista Read/Write performance
On Mon, Mar 31, 2008 at 10:04:10AM -0600, Matt Harris wrote: Jeremy Allison wrote: On Tue, Mar 18, 2008 at 03:57:16PM -0700, Matt Harris wrote: Hello. I am setting up a smb server running debian etch for a small office. Due to circumstances outside my control, most of the client machines are running Windows Vista Ultimate. The shares are all set up properly, security is set, and we're good to go. Except that the throughput from any of the Vista machines to the server is at best slow and at worst abysmal. After tweaking the socket options, turning off various services in windows (Remote Differential Compression), and even installing the freshly-released SP1, the best I've been able to get is 12.5 MB/s reading from the samba server. SCP gets 35-40 MB/s, and Vista to Vista transfers using SMB get 35-40 MB/s. I'm in the unfortunate position of having to recommend to my boss that we put the data on another Vista machine and use that as a makeshift file server until this problem can be ironed out. I very much do not want to tell him that. Any help anyone can offer would be greatly appreciated. Try loading the readahead vfs module on the shares Vista is accessing. I'm assuming the Samba code is on Linux ? Jeremy. The readahead vfs module had a slight impact, but not nearly as much so as moving to a better ethernet card. Ah, didn't notice the date on the original email (it just showed up this morning :-). Glad things got fixed. Just for interest, how much did the readahead help ? Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Create directories for share
Hi to all! My SAMBA is works almost well. It's configured to do auth with ads (win 2003) and i set all shares less the homes. But when i try to access all the shares i can't do it, but when i change the path to a linux native directory, i got. Example: i make a diretory with the test name, so, after... *smb.conf [test] comment = Test directory path = /test valid user = @DOMAIN+domain user veto files = *mp3* browseable = Yes Ps.: With this conf (test), i can't access Changing the path to the / directory [test] comment = Test directory path = / valid user = @DOMAIN+domain user veto files = *mp3* browseable = Yes I access with this change, and what's the most strange is that my test directory does not appear. I put 777 permission and also try to put 700 before. What can i do? tnx folks -- Atte, Hélio Calaça Filho -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Problem in working with domain DFS links
On Mon, Mar 24, 2008 at 06:09:05PM +0200, Ofir Azoulay wrote: Hi, First, I will try to make my terminology clear: There are two things MS calls DFS: 1. Server/share DFS - in this case you can define a virtual server/share that when a client tries to connect to, the server will direct it to another, real, server/share to which the client should connect. The virtual server/share may contain one or more real server/share pairs and the decision in the client to which to connect is based on location, load balancing, etc. 2. Directory DFS - in this case you can define that a certain directory inside your share will be actually a link to another server/share and not a real directory. This is something similar to the Linux directory in which dirs may be actually mount points. The issue is that when a client works with the server/share DFS it will actually use the virtual server name inside its SMBs request. Samba handles most of them correctly, but in the handling of Trans2/GET_DFS_REFERRAL it does not. In this action it actually makes sure that the server name in the request is the name of the computer running the Samba server - which causes DFS referral to fail. See frames 1172 and 1195 in the attached TCP-dump. No TCP-dump attached. Can you send it to me directly please ? Thanks, Jeremy. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Username case mangling: Linux username is mixed-case, Samba returns lower-case
On Monday 31 March 2008, Steve Briggs wrote: I see I'm not the first to observe this change: http://www.mail-archive.com/samba@lists.samba.org/msg85076.html That's my post and was resolved as I stated - but that server uses winbind to authenticate to an NT PDC. And despite the initial problem it was probably for the best as with Windows not being case sensitive in regards to usernames the user may have logged on with different case models causing multiple directories to be made and not having access to the ones made under the other spellings. Certainly, standard tools let you create mixed-case usernames without complaint. Not all standard tools will allow for mixed-case usernames. From Gentoo's man useradd: == CAVEATS snip Usernames must begin with a lower case letter or an underscore, and only lower case letters, underscores, dashes, and dollar signs may follow. In regular expression terms: [a-z_][a-z0-9_-]*[$] == Gentoo's useradd script will not allow the creation of a username beginning with an uppercase letter, although it can clearly be done the manual way by editing the proper files. Although Debian, and others do not adhere to this same strictness. And their same-named standard tools will allow for mixed-case usernames. It seems that with Windows usernames the conversion of %U to small case is quite helpful but with Linux usernames it can be a problem. It appears that possibly the username level parameter might help in your case. From smb.conf: This parameter is needed only on UNIX systems that have case sensitive usernames, although it does seem badly worded (as UNIX systems, AFAIK, do have case sensitive usernames) and maybe should be written as This parameter is needed only on UNIX systems that have mixed-case usernames. -- Chris -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] LDAP different Group SID -- not supported for NETLOGON calls
Hello list, I have two Samba-LDAP DC's each in different networks, domain AMECC_SAL (192.168.40.0/24) and domain AMECC_GUA (192.168.42./24). I have established a inter-domain trust relationship in both directions. My problem comes when I try to log into a machine in the AMECC_SAL domain using any user from the AMECC_GUA domain. The machine´s name in which I want to sign in is cc03. The log for the machine account says: # tail -f cc03.log [2008/03/31 16:55:17, 2] passdb/pdb_ldap.c:init_group_from_ldap(2158) init_group_from_ldap: Entry found for group: 515 [2008/03/31 16:55:35, 2] auth/auth.c:check_ntlm_password(309) check_ntlm_password: authentication for user [ricky] - [ricky] - [ricky] succeeded [2008/03/31 16:55:35, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon_internal(1004) _net_sam_logon: user AMECC_GUA\ricky has user sid S-1-5-21-2494724867-3922152549-500773586-3022 but group sid S-1-5-21-3360583363-2600074294-2199971840-513. The conflicting domain portions are not supported for NETLOGON calls Part of the pdbedit -L -v says: Unix username:ricky NT username: ricky Account Flags:[U ] User SID: S-1-5-21-2494724867-3922152549-500773586-3022 init_group_from_ldap: Entry found for group: 513 init_group_from_ldap: Entry found for group: 513 Primary Group SID:S-1-5-21-2494724867-3922152549-500773586-513 from this output we can tell that Primary Group SID is different from that group sid of cc03.log file: S-1-5-21-3360583363-2600074294-2199971840-513. I am using the following software: FreeBSD 7.0 Release, samba-3.0.28,1, openldap-2.3.41 and smbldap-tools-0.9.4_2. Please can any one give some help??? Thank you very much. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] trouble with logging Windows XP pro in samba4
On Sun, 2008-03-23 at 17:51 +, BIGEY Dany wrote: Hello Everybody First I want to said thanks for the great job you've been done with samba4. I'm french and I live in Reunion Island near South Africa. Sorry if i'm english is wrong lol. Here my trouble. I follow the how to on the wiki samba. I successfully join the domain I create. But when I try to log a user on windows xp ( create via swat and configure in 2003 active directory) I get an error like username or password is wrong. On samba, when I chek log I can see this error : Kerberos: Failed to decrypt PA-data. I take some information on net about windows encrypted method and kerberos/heimdal. I would like to know if their an option or a configuration file for change encryption method if is really this kind of problem. What is in your /etc/krb5.conf? In the other case someone can tell me what it's the trouble? A few people have been reporting similar issues. Aside from checking with the current code (alpha3 was just released), and a fresh provision, I can't help at the moment. BTW, while Samba4 is in alpha, bug reports can best be addressed to the samba-technical list. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Red Hat Inc. signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] get Samba Server via VPN from windows XP
Engi Zoltán wrote: Hi, I have network in my office with Samba server on Debian Linux. I would like to get the folders and files in this server from my home with Windows XP. So, I done the VPN connection. I think, it works good. In the VPN connection Samba Server's ip address is 192.168.2.1 and net mask is 255.255.255.255. The client's ip address is 192.168.2.6. and netmask is 255.255.255.252. I can ping the server from the client and back too. The workgrupname in the smb.conf and windows XP are same. The problem is that I can't see the linux computer in the network place on the Windows XP. Why? Sincerely, Zoli Network places isn't the best way to find machines, especially over a WAN. Try browsing directly to the server's name or IP. If you really need network places to work, setup a wins server. *Michael Heydon - IT Administrator * [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Force User based on directory name
hevfuture wrote: Hi, Is there a way that I can force the user based on the directory name? I have administrators who need to place files in the [homes] directories of multiple users, and I need the user of all the files to be based on the name of the directory (the user cannot be administrator even when the administrator puts the file in), so that the user can access the files in his or her [homes]. Any help is appreciated! Thanks! force user = %S maybe? *Michael Heydon - IT Administrator * [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] strange permission denied problem
I built an embedded box which uses mount.cifs to mount network shares.I've shipped several of these and all are working fine except for one, which gives me permission denied on certain files: [EMAIL PROTECTED]:~/mnt/bgrp1/c/Ballance Group Folders/Scully/Client Photos-Scully# cat Office Pics 002.jpg /dev/null cat: Office Pics 002.jpg: Permission denied [EMAIL PROTECTED]:~/mnt/bgrp1/c/Ballance Group Folders/Scully/Client Photos-Scully# cat Iron Concrete Table.jpg /dev/null [EMAIL PROTECTED]:~/mnt/bgrp1/c/Ballance Group Folders/Scully/Client Photos-Scully# So only the Office Pics file gets a permission denied. [EMAIL PROTECTED]:~/mnt/bgrp1/c/Ballance Group Folders/Scully/Client Photos-Scully# ls -al dr-xr-x---1 root root0 Mar 28 14:22 . dr-xr-x---1 root root0 Mar 27 17:35 .. -r--r-1 root root 113826 Mar 3 16:26 Iron Concrete Table.jpg -r--r-1 root root 744886 Feb 21 16:14 Nightstands.jpg -r--r-1 root root 765452 Feb 15 19:09 Occhio Chair.jpg -r--r-1 root root90670 Mar 28 14:22 Office Pics 002.jpg cat /proc/mounts says: //bgrp1/c /tmp/mnt/bgrp1/c cifs ro,mand,nodiratime,unc=\\bgrp1\c,username=root,domain=,rsize=4100,wsize=4100 0 0 and the mount line itself is mount.cifs //$server/$wshare /tmp/mnt/$server/$lshare -o ip=$target,guest,ro,file_mode=0440,dir_mode=0550 I can't for the life of me figure out why some files give me a permission denied. I have no physical access to the problem box; here's what I know: --+ Looking up status of 192.168.0.2 BGRP1 00 - B ACTIVE MSHOME 00 - GROUP B ACTIVE BGRP1 20 - B ACTIVE MSHOME 1e - GROUP B ACTIVE MSHOME 1d - B ACTIVE ..__MSBROWSE__. 01 - GROUP B ACTIVE MAC Address = 00-19-DB-A6-43-23 --+ Sharename Type Comment - --- IPC$IPC Remote IPC D$ Disk Default share C Disk Ballance Group Folders Disk F Disk ADMIN$ Disk Remote Admin C$ Disk Default share Server Comment ---- WorkgroupMaster How do I go about diagnosing this? Thanks, --Yan -- o__ ,/'_ o__ (_)\(_),/'_o__ Yan Seiner (_)\(_) ,/'_ o__ Certified Personal Trainer (_)\(_),/'_o__ Licensed Professional Engineer (_)\(_) ,/'_ Who says engineers have to be pencil necked geeks? (_)\(_) Help out my kids' school: http://www.seiner.com/blog/Travels/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[SCM] Samba Shared Repository - branch v3-2-stable updated - release-3-2-0pre2-244-g02c9176
The branch, v3-2-stable has been updated
via 02c9176ec91184900846be011f92ff6b8524b948 (commit)
from fd1c56610e5a1672ab87980b4acee50698aaa1c7 (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable
- Log -
commit 02c9176ec91184900846be011f92ff6b8524b948
Author: Michael Adam [EMAIL PROTECTED]
Date: Sat Mar 29 01:05:17 2008 +0100
winbindd_cache: add missing validation function for pwinfo cache entry
Michael
(cherry picked from commit 6d3fc63bfab06346fa57719e8747397873a3c46d)
---
Summary of changes:
source/winbindd/winbindd_cache.c | 24
1 files changed, 24 insertions(+), 0 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source/winbindd/winbindd_cache.c b/source/winbindd/winbindd_cache.c
index a8a98e5..0f8bd49 100644
--- a/source/winbindd/winbindd_cache.c
+++ b/source/winbindd/winbindd_cache.c
@@ -3209,6 +3209,29 @@ static int validate_de(TALLOC_CTX *mem_ctx, const char
*keystr, TDB_DATA dbuf,
return 0;
}
+static int validate_pwinfo(TALLOC_CTX *mem_ctx, const char *keystr,
+ TDB_DATA dbuf, struct tdb_validation_status *state)
+{
+ struct cache_entry *centry = create_centry_validate(keystr, dbuf,
state);
+
+ if (!centry) {
+ return 1;
+ }
+
+ (void)centry_string(centry, mem_ctx);
+ (void)centry_string(centry, mem_ctx);
+ (void)centry_string(centry, mem_ctx);
+ (void)centry_uint32(centry);
+
+ centry_free(centry);
+
+ if (!(state-success)) {
+ return 1;
+ }
+ DEBUG(10,(validate_pwinfo: %s ok\n, keystr));
+ return 0;
+}
+
static int validate_trustdoms(TALLOC_CTX *mem_ctx, const char *keystr,
TDB_DATA dbuf,
struct tdb_validation_status *state)
{
@@ -3307,6 +3330,7 @@ struct key_val_struct {
{GM/, validate_gm},
{DR/, validate_dr},
{DE/, validate_de},
+ {NSS/PWINFO/, validate_pwinfo},
{TRUSTDOMS/, validate_trustdoms},
{TRUSTDOMCACHE/, validate_trustdomcache},
{WINBINDD_OFFLINE, validate_offline},
--
Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-544-g4d0a5d5
The branch, v3-2-test has been updated via 4d0a5d5c93ddab444a0097e1c56e4363574cb2b6 (commit) from 5c28c74aa06a82559f498373b3d6e9892d5c2cbe (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 4d0a5d5c93ddab444a0097e1c56e4363574cb2b6 Author: Michael Adam [EMAIL PROTECTED] Date: Mon Mar 31 11:58:35 2008 +0200 build: fix configure option --with-static-libs=libXYZ This should not prevent building but linking of shared lib for subsystem XYZ (example --with-static-libs=libtdb). m4 quotation is tricky... Michael --- Summary of changes: source/m4/aclocal.m4 |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source/m4/aclocal.m4 b/source/m4/aclocal.m4 index ef0abad..48cdacc 100644 --- a/source/m4/aclocal.m4 +++ b/source/m4/aclocal.m4 @@ -100,7 +100,7 @@ build_lib=yes if eval test x$build_lib = xyes -a $BLDSHARED = true; then LIBUC[_SHARED]=$LIBUC[_SHARED_TARGET] AC_MSG_RESULT(yes) - if test x$USESHARED != xtrue -o x$LINK_LIBUC = xSTATIC ; then + if test x$USESHARED != xtrue -o x$[LINK_]LIBUC = xSTATIC ; then LIBUC[_STATIC]=$LIBUC[_STATIC_TARGET] else LIBUC[_LIBS]=LIBLIBS -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-stable updated - release-3-2-0pre2-245-gb6c8524
The branch, v3-2-stable has been updated via b6c8524b2cc615ae86636305d98e621ab36d8723 (commit) from 02c9176ec91184900846be011f92ff6b8524b948 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-stable - Log - commit b6c8524b2cc615ae86636305d98e621ab36d8723 Author: Michael Adam [EMAIL PROTECTED] Date: Mon Mar 31 11:58:35 2008 +0200 build: fix configure option --with-static-libs=libXYZ This should not prevent building but linking of shared lib for subsystem XYZ (example --with-static-libs=libtdb). m4 quotation is tricky... Michael (cherry picked from commit 4d0a5d5c93ddab444a0097e1c56e4363574cb2b6) --- Summary of changes: source/m4/aclocal.m4 |2 +- 1 files changed, 1 insertions(+), 1 deletions(-) Changeset truncated at 500 lines: diff --git a/source/m4/aclocal.m4 b/source/m4/aclocal.m4 index ef0abad..48cdacc 100644 --- a/source/m4/aclocal.m4 +++ b/source/m4/aclocal.m4 @@ -100,7 +100,7 @@ build_lib=yes if eval test x$build_lib = xyes -a $BLDSHARED = true; then LIBUC[_SHARED]=$LIBUC[_SHARED_TARGET] AC_MSG_RESULT(yes) - if test x$USESHARED != xtrue -o x$LINK_LIBUC = xSTATIC ; then + if test x$USESHARED != xtrue -o x$[LINK_]LIBUC = xSTATIC ; then LIBUC[_STATIC]=$LIBUC[_STATIC_TARGET] else LIBUC[_LIBS]=LIBLIBS -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-551-g960c069
The branch, v3-2-test has been updated
via 960c069a2354e0803e2cbf22c26e1a9d0b657b79 (commit)
via a7d735df292cee7dd6e23c7d2328481d57162904 (commit)
via 43df48bdca1a71fa44b24bb3917869f886555d9c (commit)
via a25b39cac1716323154dd30acb30180d3273587b (commit)
via 9936d861a1c1163ce6fd079211b50fd9b52bc05d (commit)
via 4766ebf7ac8d33f9cd0f983ecdc54ef44959648b (commit)
via 9a2f0b21925e630fa9b268cedbc19cf814686b42 (commit)
from 4d0a5d5c93ddab444a0097e1c56e4363574cb2b6 (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -
commit 960c069a2354e0803e2cbf22c26e1a9d0b657b79
Author: Stefan Metzmacher [EMAIL PROTECTED]
Date: Fri Mar 28 19:39:43 2008 +0100
wbinfo: use wbcAllocateGid()
metze
commit a7d735df292cee7dd6e23c7d2328481d57162904
Author: Stefan Metzmacher [EMAIL PROTECTED]
Date: Fri Mar 28 19:39:16 2008 +0100
wbinfo: use wbcAllocateUid()
metze
commit 43df48bdca1a71fa44b24bb3917869f886555d9c
Author: Stefan Metzmacher [EMAIL PROTECTED]
Date: Fri Mar 28 19:38:24 2008 +0100
wbinfo: use wbcSidToGid()
metze
commit a25b39cac1716323154dd30acb30180d3273587b
Author: Stefan Metzmacher [EMAIL PROTECTED]
Date: Fri Mar 28 19:37:50 2008 +0100
wbinfo: use wbcSidToUid()
metze
commit 9936d861a1c1163ce6fd079211b50fd9b52bc05d
Author: Stefan Metzmacher [EMAIL PROTECTED]
Date: Fri Mar 28 19:37:02 2008 +0100
wbinfo: use wbcGitToSid()
metze
commit 4766ebf7ac8d33f9cd0f983ecdc54ef44959648b
Author: Stefan Metzmacher [EMAIL PROTECTED]
Date: Fri Mar 28 19:34:10 2008 +0100
wbinfo: use wbcUidToSid()
metze
commit 9a2f0b21925e630fa9b268cedbc19cf814686b42
Author: Stefan Metzmacher [EMAIL PROTECTED]
Date: Fri Mar 28 19:01:54 2008 +0100
wbinfo: use wbcPing()
metze
---
Summary of changes:
source/nsswitch/wbinfo.c | 118 +++--
1 files changed, 71 insertions(+), 47 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source/nsswitch/wbinfo.c b/source/nsswitch/wbinfo.c
index 15d6ae2..82d1061 100644
--- a/source/nsswitch/wbinfo.c
+++ b/source/nsswitch/wbinfo.c
@@ -27,8 +27,6 @@
#undef DBGC_CLASS
#define DBGC_CLASS DBGC_WINBIND
-extern int winbindd_fd;
-
static char winbind_separator_int(bool strict)
{
struct winbindd_response response;
@@ -564,23 +562,27 @@ static bool wbinfo_check_secret(void)
static bool wbinfo_uid_to_sid(uid_t uid)
{
- struct winbindd_request request;
- struct winbindd_response response;
-
- ZERO_STRUCT(request);
- ZERO_STRUCT(response);
+ wbcErr wbc_status = WBC_ERR_UNKNOWN_FAILURE;
+ struct wbcDomainSid sid;
+ char *sid_str = NULL;
/* Send request */
- request.data.uid = uid;
+ wbc_status = wbcUidToSid(uid, sid);
+ if (!WBC_ERROR_IS_OK(wbc_status)) {
+ return false;
+ }
- if (winbindd_request_response(WINBINDD_UID_TO_SID, request, response)
!=
- NSS_STATUS_SUCCESS)
+ wbc_status = wbcSidToString(sid, sid_str);
+ if (!WBC_ERROR_IS_OK(wbc_status)) {
return false;
+ }
/* Display response */
- d_printf(%s\n, response.data.sid.sid);
+ d_printf(%s\n, sid_str);
+
+ wbcFreeMemory(sid_str);
return true;
}
@@ -589,81 +591,96 @@ static bool wbinfo_uid_to_sid(uid_t uid)
static bool wbinfo_gid_to_sid(gid_t gid)
{
- struct winbindd_request request;
- struct winbindd_response response;
-
- ZERO_STRUCT(request);
- ZERO_STRUCT(response);
+ wbcErr wbc_status = WBC_ERR_UNKNOWN_FAILURE;
+ struct wbcDomainSid sid;
+ char *sid_str = NULL;
/* Send request */
- request.data.gid = gid;
+ wbc_status = wbcGidToSid(gid, sid);
+ if (!WBC_ERROR_IS_OK(wbc_status)) {
+ return false;
+ }
- if (winbindd_request_response(WINBINDD_GID_TO_SID, request, response)
!=
- NSS_STATUS_SUCCESS)
+ wbc_status = wbcSidToString(sid, sid_str);
+ if (!WBC_ERROR_IS_OK(wbc_status)) {
return false;
+ }
/* Display response */
- d_printf(%s\n, response.data.sid.sid);
+ d_printf(%s\n, sid_str);
+
+ wbcFreeMemory(sid_str);
return true;
}
/* Convert sid to uid */
-static bool wbinfo_sid_to_uid(char *sid)
+static bool wbinfo_sid_to_uid(const char *sid_str)
{
- struct winbindd_request request;
- struct winbindd_response response;
-
- ZERO_STRUCT(request);
- ZERO_STRUCT(response);
+ wbcErr wbc_status = WBC_ERR_UNKNOWN_FAILURE;
+ struct wbcDomainSid sid;
+ uid_t uid;
/* Send request */
- fstrcpy(request.data.sid, sid);
+ wbc_status =
svn commit: samba-web r1180 - in trunk: .
Author: kseeger Date: 2008-03-31 15:21:34 + (Mon, 31 Mar 2008) New Revision: 1180 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-webrev=1180 Log: -Remove Chinese link (commercial content) -Remove Italian link (pointed to english site). Simo, please check and feel free to re-add. Karolin Modified: trunk/header_columns.html Changeset: Modified: trunk/header_columns.html === --- trunk/header_columns.html 2008-03-29 10:30:27 UTC (rev 1179) +++ trunk/header_columns.html 2008-03-31 15:21:34 UTC (rev 1180) @@ -182,9 +182,7 @@ h4International Sites/h4 ul li Deutsch: a href=http://samba.sernet.de/;samba.sernet.de/a/li -li Italiano: a href=http://samba.xsec.it/;samba.xsec.it/a/li li Hebrew: a href=http://linux.israel.net/samba/samba.html;linux.israel.net/a/li -li Chinese: a href=http://hk.samba.org/;hk.samba.org/a/li /ul /div
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-552-g04b4898
The branch, v3-2-test has been updated
via 04b48984bbf84c55bb41a74a11cbcc7358377fed (commit)
from 960c069a2354e0803e2cbf22c26e1a9d0b657b79 (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -
commit 04b48984bbf84c55bb41a74a11cbcc7358377fed
Author: Michael Adam [EMAIL PROTECTED]
Date: Mon Mar 31 17:20:07 2008 +0200
registry: reg_deletevalue should return error, when the value does not
exist.
Michael
---
Summary of changes:
source/registry/reg_api.c | 18 ++
1 files changed, 18 insertions(+), 0 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source/registry/reg_api.c b/source/registry/reg_api.c
index e52aaac..1a0bf2b 100644
--- a/source/registry/reg_api.c
+++ b/source/registry/reg_api.c
@@ -653,6 +653,19 @@ WERROR reg_setvalue(struct registry_key *key, const char
*name,
return WERR_OK;
}
+static WERROR reg_value_exists(struct registry_key *key, const char *name)
+{
+ int i;
+
+ for (i=0; ikey-values-num_values; i++) {
+ if (strequal(key-values-values[i]-valuename, name)) {
+ return WERR_OK;
+ }
+ }
+
+ return WERR_BADFILE;
+}
+
WERROR reg_deletevalue(struct registry_key *key, const char *name)
{
WERROR err;
@@ -665,6 +678,11 @@ WERROR reg_deletevalue(struct registry_key *key, const
char *name)
return err;
}
+ err = reg_value_exists(key, name);
+ if (!W_ERROR_IS_OK(err)) {
+ return err;
+ }
+
regval_ctr_delvalue(key-values, name);
if (!store_reg_values(key-key, key-values)) {
--
Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-555-gd775194
The branch, v3-2-test has been updated
via d775194e9c7b75182c485fba427b20ec2bfcf16c (commit)
via bf4af79f050cceb6611a8aa3d893b59b816a41ce (commit)
via ad1fbadf81c915425301ec495744c11f3103169f (commit)
from 04b48984bbf84c55bb41a74a11cbcc7358377fed (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -
commit d775194e9c7b75182c485fba427b20ec2bfcf16c
Author: Michael Adam [EMAIL PROTECTED]
Date: Mon Mar 31 13:51:49 2008 +0200
test: add (and unify) sectioning output of subtests in tests_all.sh
Michael
commit bf4af79f050cceb6611a8aa3d893b59b816a41ce
Author: Michael Adam [EMAIL PROTECTED]
Date: Mon Mar 31 13:33:12 2008 +0200
test: add possibility to select tests to run via tests_all.sh (make test)
This allows to select the tests to run with tests_all.sh by setting
the environment variable RUNTESTS. Example:
RUNTESTS=smbclient_s3_encrypted wbinfo_s3 make test
Michael
commit ad1fbadf81c915425301ec495744c11f3103169f
Author: Michael Adam [EMAIL PROTECTED]
Date: Mon Mar 31 13:20:08 2008 +0200
test: in tests_all.sh, wrap calls to test scripts into shell functions.
This is in preparation for enabling running only selected test scripts
through make test.
Michael
---
Summary of changes:
source/script/tests/tests_all.sh | 91 ++---
1 files changed, 73 insertions(+), 18 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source/script/tests/tests_all.sh b/source/script/tests/tests_all.sh
index 369cf3e..e2cfad6 100755
--- a/source/script/tests/tests_all.sh
+++ b/source/script/tests/tests_all.sh
@@ -1,20 +1,75 @@
-$SCRIPTDIR/test_local_s3.sh || failed=`expr $failed + $?`
-$SCRIPTDIR/test_smbtorture_s3.sh //$SERVER_IP/tmp $USERNAME $PASSWORD ||
failed=`expr $failed + $?`
-echo Testing encrypted
-$SCRIPTDIR/test_smbtorture_s3.sh //$SERVER_IP/tmp $USERNAME $PASSWORD -e
|| failed=`expr $failed + $?`
-$SCRIPTDIR/test_smbclient_s3.sh $SERVER $SERVER_IP || failed=`expr $failed +
$?`
-echo Testing encrypted
-$SCRIPTDIR/test_smbclient_s3.sh $SERVER $SERVER_IP -e || failed=`expr
$failed + $?`
-$SCRIPTDIR/test_wbinfo_s3.sh $WORKGROUP $SERVER $USERNAME $PASSWORD ||
failed=`expr $failed + $?`
-$SCRIPTDIR/test_ntlm_auth_s3.sh || failed=`expr $failed + $?`
-
-eval $LIB_PATH_VAR=\$SAMBA4SHAREDDIR:\$$LIB_PATH_VAR; export $LIB_PATH_VAR
-eval echo $LIB_PATH_VAR=\$$LIB_PATH_VAR
-SMBTORTURE4VERSION=`$SMBTORTURE4 --version`
-if [ -n $SMBTORTURE4 -a -n $SMBTORTURE4VERSION ];then
- echo Running Tests with Samba4's smbtorture
- echo $SMBTORTURE4VERSION
- $SCRIPTDIR/test_posix_s3.sh //$SERVER_IP/tmp $USERNAME $PASSWORD ||
failed=`expr $failed + $?`
+local_s3() {
+ echo RUNNING SUBTESTS local_s3
+ $SCRIPTDIR/test_local_s3.sh \
+ || failed=`expr $failed + $?`
+}
+
+smbtorture_s3() {
+ echo RUNNING SUBTESTS smbtorture_s3
+ $SCRIPTDIR/test_smbtorture_s3.sh \
+ //$SERVER_IP/tmp $USERNAME $PASSWORD \
+ || failed=`expr $failed + $?`
+}
+
+smbtorture_s3_encrypted() {
+ echo RUNNING SUBTESTS smbtorture_s3_encrypted
+ $SCRIPTDIR/test_smbtorture_s3.sh \
+ //$SERVER_IP/tmp $USERNAME $PASSWORD -e \
+ || failed=`expr $failed + $?`
+}
+
+smbclient_s3() {
+ echo RUNNING SUBTESTS smbclient_s3
+ $SCRIPTDIR/test_smbclient_s3.sh $SERVER $SERVER_IP \
+ || failed=`expr $failed + $?`
+}
+
+smbclient_s3_encrypted() {
+ echo RUNNING SUBTESTS smbclient_s3_encrypted
+ $SCRIPTDIR/test_smbclient_s3.sh $SERVER $SERVER_IP -e \
+ || failed=`expr $failed + $?`
+}
+
+wbinfo_s3() {
+ echo RUNNING SUBTESTS wbinfo_s3
+ $SCRIPTDIR/test_wbinfo_s3.sh $WORKGROUP $SERVER $USERNAME $PASSWORD \
+ || failed=`expr $failed + $?`
+}
+
+ntlm_auth_s3() {
+ echo RUNNING SUBTESTS ntlm_auth_s3
+ $SCRIPTDIR/test_ntlm_auth_s3.sh \
+ || failed=`expr $failed + $?`
+}
+
+posix_s3() {
+ echo RUNNING SUBTESTS posix_s3
+ eval $LIB_PATH_VAR=\$SAMBA4SHAREDDIR:\$$LIB_PATH_VAR; export
$LIB_PATH_VAR
+ eval echo $LIB_PATH_VAR=\$$LIB_PATH_VAR
+ SMBTORTURE4VERSION=`$SMBTORTURE4 --version`
+ if [ -n $SMBTORTURE4 -a -n $SMBTORTURE4VERSION ];then
+ echo Running Tests with Samba4's smbtorture
+ echo $SMBTORTURE4VERSION
+ $SCRIPTDIR/test_posix_s3.sh \
+ //$SERVER_IP/tmp $USERNAME $PASSWORD \
+ || failed=`expr $failed + $?`
+ else
+ echo Skip Tests with Samba4's smbtorture
+ fi
+}
+
+if test x$RUNTESTS = x ; then
+ local_s3
+ smbtorture_s3
+ smbtorture_s3_encrypted
+ smbclient_s3
+ smbclient_s3_encrypted
+ wbinfo_s3
+ ntlm_auth_s3
+ posix_s3
else
-
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-559-g3414eac
The branch, v3-2-test has been updated
via 3414eac439b731ad7204b821ddc4fec54fe4435d (commit)
via b68caaa81bd75bb882c9363612d11d49dd73cb6f (commit)
via e7827bb6afa264c12ecdc0858f49707ca3d6104f (commit)
via 6aac972d790ad5ca65096cb2e85e6819b60a5413 (commit)
from d775194e9c7b75182c485fba427b20ec2bfcf16c (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -
commit 3414eac439b731ad7204b821ddc4fec54fe4435d
Author: Gerald W. Carter [EMAIL PROTECTED]
Date: Mon Mar 31 13:39:54 2008 -0500
Fix enumeration of forest trusts from our root domain.
Do not overwrite the domain-domain_flags when setting infomation
in set_dc_type_and_flags_connect().
commit b68caaa81bd75bb882c9363612d11d49dd73cb6f
Author: Gerald W. Carter [EMAIL PROTECTED]
Date: Thu Mar 27 15:23:36 2008 -0500
DIsplay the short domain name in wbinfo -m by default.
This fixes wbinfo -m to make preexisting behavior.
Also adds the dns domain to the --verbose output.
commit e7827bb6afa264c12ecdc0858f49707ca3d6104f
Author: Steven Danneman [EMAIL PROTECTED]
Date: Tue Mar 25 16:58:40 2008 -0700
Augmented wbinfo -m to list additional information about the type,
direction, and transitivty of trusts.
* added several helper functions to convert the trust_flags field in the
winbindd_tdc_domain to more useful administrator ideas of trust type, trust
direction, and trust transitivity.
* converted winbindd_list_trusted_domains() to enumerate the trusted domain
cache, instead of the domain list, and return additional trust information
to
the calling process
* modified wbinfo to pretty print this additional trust information when a
new
--verbose switch is given with -m. Thus wbinfo -m and wbinfo
-all-domains
output as before, but wbinfo --verbose -m prints extra trust info.
* updated some comments and fixed typos
commit 6aac972d790ad5ca65096cb2e85e6819b60a5413
Author: Steven Danneman [EMAIL PROTECTED]
Date: Tue Mar 25 16:50:58 2008 -0700
Forest root trust flags won't overwrite child trust flags
* changed the behavior of winbind_ads.c:trusted_domains() to not overwrite
existing trust information if we're joined to a child domain, and querying
the
forest root domain. Previously if we were joined to a child domain, we'd
request all known trust information from this child domain (our primary
domain)
and store it in the tdc. We'd then request all trust information from our
tree
root (to get the forests we transitively trust) and overwrite the existing
trust
information we already had from the perspective of the tree root.
* updated several comments and fixed typos
---
Summary of changes:
source/nsswitch/wbinfo.c| 99 +++--
source/winbindd/winbindd_ads.c | 81 +++---
source/winbindd/winbindd_cm.c |2 +-
source/winbindd/winbindd_misc.c | 104 ++-
source/winbindd/winbindd_util.c |6 +-
5 files changed, 230 insertions(+), 62 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source/nsswitch/wbinfo.c b/source/nsswitch/wbinfo.c
index 82d1061..d62e82a 100644
--- a/source/nsswitch/wbinfo.c
+++ b/source/nsswitch/wbinfo.c
@@ -83,7 +83,7 @@ static const char *get_winbind_domain(void)
if (!WBC_ERROR_IS_OK(wbc_status)) {
d_fprintf(stderr, could not obtain winbind domain name!\n);
- /* HACK: (this module should not call lp_ funtions) */
+ /* HACK: (this module should not call lp_ functions) */
return lp_workgroup();
}
@@ -345,13 +345,15 @@ static bool wbinfo_wins_byip(char *ip)
return true;
}
-/* List trusted domains */
+/* List all/trusted domains */
-static bool wbinfo_list_domains(bool list_all_domains)
+static bool wbinfo_list_domains(bool list_all_domains, bool verbose)
{
struct winbindd_request request;
struct winbindd_response response;
+ bool print_all = !list_all_domains verbose;
+
ZERO_STRUCT(request);
ZERO_STRUCT(response);
@@ -368,21 +370,78 @@ static bool wbinfo_list_domains(bool list_all_domains)
if (response.extra_data.data) {
const char *extra_data = (char *)response.extra_data.data;
char *name;
- char *p;
+ char *beg, *end;
TALLOC_CTX *frame = talloc_stackframe();
+ if (print_all) {
+ d_printf(%-16s%-24s%-12s%-12s%-5s%-5s\n,
+Domain Name, DNS Domain, Trust Type,
+Transitive, In, Out);
+ }
+
while(next_token_talloc(frame,extra_data,name,\n))
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-563-gc4f248d
The branch, v3-2-test has been updated
via c4f248df8e34c6a028bf8d789fe9763b0ea063fe (commit)
via 35a70c65beed1c4a1fab4113af7a5b232f23063b (commit)
via 98606c667a425113d87b2756ee7df34f67445539 (commit)
via 8f6f0d1601cb93af51f8d493382cd707c3eb0cdf (commit)
from 3414eac439b731ad7204b821ddc4fec54fe4435d (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -
commit c4f248df8e34c6a028bf8d789fe9763b0ea063fe
Author: Günther Deschner [EMAIL PROTECTED]
Date: Mon Mar 31 20:43:18 2008 +0200
Re-add support for the samr parameters string.
(dialin settings, terminal server settings, etc.)
Guenther
commit 35a70c65beed1c4a1fab4113af7a5b232f23063b
Author: Günther Deschner [EMAIL PROTECTED]
Date: Mon Mar 31 20:42:26 2008 +0200
Re-run make idl.
Guenther
commit 98606c667a425113d87b2756ee7df34f67445539
Author: Günther Deschner [EMAIL PROTECTED]
Date: Mon Mar 31 20:40:56 2008 +0200
The parameters string (aka munged dial string) in samr is not a normal
lsa_String.
Guenther
commit 8f6f0d1601cb93af51f8d493382cd707c3eb0cdf
Author: Günther Deschner [EMAIL PROTECTED]
Date: Mon Mar 31 20:40:16 2008 +0200
Add init_samr_parameters_string().
Guenther
---
Summary of changes:
source/librpc/gen_ndr/ndr_samr.c | 20
source/librpc/gen_ndr/samr.h |4 +-
source/librpc/idl/samr.idl|4 +-
source/rpc_client/init_samr.c | 10 ++--
source/rpc_server/srv_samr_nt.c | 86
source/rpc_server/srv_samr_util.c | 17 +++
source/rpcclient/cmd_samr.c | 16 ++-
7 files changed, 99 insertions(+), 58 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source/librpc/gen_ndr/ndr_samr.c b/source/librpc/gen_ndr/ndr_samr.c
index 3af589f..46b3a07 100644
--- a/source/librpc/gen_ndr/ndr_samr.c
+++ b/source/librpc/gen_ndr/ndr_samr.c
@@ -2613,10 +2613,10 @@ static enum ndr_err_code
ndr_push_samr_UserInfo20(struct ndr_push *ndr, int ndr_
{
if (ndr_flags NDR_SCALARS) {
NDR_CHECK(ndr_push_align(ndr, 4));
- NDR_CHECK(ndr_push_lsa_String(ndr, NDR_SCALARS,
r-parameters));
+ NDR_CHECK(ndr_push_lsa_BinaryString(ndr, NDR_SCALARS,
r-parameters));
}
if (ndr_flags NDR_BUFFERS) {
- NDR_CHECK(ndr_push_lsa_String(ndr, NDR_BUFFERS,
r-parameters));
+ NDR_CHECK(ndr_push_lsa_BinaryString(ndr, NDR_BUFFERS,
r-parameters));
}
return NDR_ERR_SUCCESS;
}
@@ -2625,10 +2625,10 @@ static enum ndr_err_code
ndr_pull_samr_UserInfo20(struct ndr_pull *ndr, int ndr_
{
if (ndr_flags NDR_SCALARS) {
NDR_CHECK(ndr_pull_align(ndr, 4));
- NDR_CHECK(ndr_pull_lsa_String(ndr, NDR_SCALARS,
r-parameters));
+ NDR_CHECK(ndr_pull_lsa_BinaryString(ndr, NDR_SCALARS,
r-parameters));
}
if (ndr_flags NDR_BUFFERS) {
- NDR_CHECK(ndr_pull_lsa_String(ndr, NDR_BUFFERS,
r-parameters));
+ NDR_CHECK(ndr_pull_lsa_BinaryString(ndr, NDR_BUFFERS,
r-parameters));
}
return NDR_ERR_SUCCESS;
}
@@ -2637,7 +2637,7 @@ _PUBLIC_ void ndr_print_samr_UserInfo20(struct ndr_print
*ndr, const char *name,
{
ndr_print_struct(ndr, name, samr_UserInfo20);
ndr-depth++;
- ndr_print_lsa_String(ndr, parameters, r-parameters);
+ ndr_print_lsa_BinaryString(ndr, parameters, r-parameters);
ndr-depth--;
}
@@ -2711,7 +2711,7 @@ static enum ndr_err_code ndr_push_samr_UserInfo21(struct
ndr_push *ndr, int ndr_
NDR_CHECK(ndr_push_lsa_String(ndr, NDR_SCALARS,
r-description));
NDR_CHECK(ndr_push_lsa_String(ndr, NDR_SCALARS,
r-workstations));
NDR_CHECK(ndr_push_lsa_String(ndr, NDR_SCALARS, r-comment));
- NDR_CHECK(ndr_push_lsa_String(ndr, NDR_SCALARS,
r-parameters));
+ NDR_CHECK(ndr_push_lsa_BinaryString(ndr, NDR_SCALARS,
r-parameters));
NDR_CHECK(ndr_push_lsa_String(ndr, NDR_SCALARS, r-unknown1));
NDR_CHECK(ndr_push_lsa_String(ndr, NDR_SCALARS, r-unknown2));
NDR_CHECK(ndr_push_lsa_String(ndr, NDR_SCALARS, r-unknown3));
@@ -2741,7 +2741,7 @@ static enum ndr_err_code ndr_push_samr_UserInfo21(struct
ndr_push *ndr, int ndr_
NDR_CHECK(ndr_push_lsa_String(ndr, NDR_BUFFERS,
r-description));
NDR_CHECK(ndr_push_lsa_String(ndr, NDR_BUFFERS,
r-workstations));
NDR_CHECK(ndr_push_lsa_String(ndr, NDR_BUFFERS, r-comment));
- NDR_CHECK(ndr_push_lsa_String(ndr, NDR_BUFFERS,
r-parameters));
+ NDR_CHECK(ndr_push_lsa_BinaryString(ndr, NDR_BUFFERS,
r-parameters));
NDR_CHECK(ndr_push_lsa_String(ndr,
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-564-g0c94918
The branch, v3-2-test has been updated
via 0c94918fb52c5345ce30490046b79f81712c30bf (commit)
from c4f248df8e34c6a028bf8d789fe9763b0ea063fe (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -
commit 0c94918fb52c5345ce30490046b79f81712c30bf
Author: Gerald W. Carter [EMAIL PROTECTED]
Date: Mon Mar 31 14:33:53 2008 -0500
Patch from Nicholas Brealey [EMAIL PROTECTED] to distinguish between
WinXP and WinXP64.
Defines a new value for the %a variable when detecting a Windows XP 64-bit
client.
---
Summary of changes:
source/include/smb.h |2 +-
source/lib/util.c|5 -
2 files changed, 5 insertions(+), 2 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source/include/smb.h b/source/include/smb.h
index bf9ca6b..4d18dc5 100644
--- a/source/include/smb.h
+++ b/source/include/smb.h
@@ -1571,7 +1571,7 @@ enum ldap_passwd_sync_types {LDAP_PASSWD_SYNC_ON,
LDAP_PASSWD_SYNC_OFF, LDAP_PAS
/* Remote architectures we know about. */
enum remote_arch_types {RA_UNKNOWN, RA_WFWG, RA_OS2, RA_WIN95, RA_WINNT,
RA_WIN2K, RA_WINXP, RA_WIN2K3, RA_VISTA,
- RA_SAMBA, RA_CIFSFS};
+ RA_SAMBA, RA_CIFSFS, RA_WINXP64};
/* case handling */
enum case_handling {CASE_LOWER,CASE_UPPER};
diff --git a/source/lib/util.c b/source/lib/util.c
index dba7142..00062b8 100644
--- a/source/lib/util.c
+++ b/source/lib/util.c
@@ -2057,7 +2057,7 @@ void ra_lanman_string( const char *native_lanman )
if ( strcmp( native_lanman, Windows 2002 5.1 ) == 0 )
set_remote_arch( RA_WINXP );
else if ( strcmp( native_lanman, Windows XP 5.2 ) == 0 )
- set_remote_arch( RA_WINXP );
+ set_remote_arch( RA_WINXP64 );
else if ( strcmp( native_lanman, Windows Server 2003 5.2 ) == 0 )
set_remote_arch( RA_WIN2K3 );
}
@@ -2098,6 +2098,9 @@ void set_remote_arch(enum remote_arch_types type)
case RA_WINXP:
remote_arch_str = WinXP;
break;
+ case RA_WINXP64:
+ remote_arch_str = WinXP64;
+ break;
case RA_WIN2K3:
remote_arch_str = Win2K3;
break;
--
Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-565-ge03d1df
The branch, v3-2-test has been updated
via e03d1dfdb80333c071b600245eb749ef5664aa22 (commit)
from 0c94918fb52c5345ce30490046b79f81712c30bf (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -
commit e03d1dfdb80333c071b600245eb749ef5664aa22
Author: Jeff Layton [EMAIL PROTECTED]
Date: Mon Mar 10 15:54:36 2008 -0400
mount.cifs: fix several problems when mounting subdirectories of shares
(try 2)
This patch is the second patch to attempt to fix up some of the problems
with mounting subdirectories of shares. The earlier patch didn't handle
this correctly when POSIX extensions were enabled. This one does.
This is a bit of a confusing area since the different components of
a service string have different rules:
1) hostname: no '/' (slash) or '\' (backslash) is allowed to be
embedded within the string
2) sharename: same rules as hostname
3) prefixpath: '\' *is* allowed to be embedded in a path component,
iff POSIX extensions are enabled. Otherwise, neither
character is allowed.
The idea here is to allow either character to act as a delimiter when we
know that the character can't be anything but a delimiter (namely
everywhere up to the start of the prefixpath). The patch will convert
any '\' unconditionally to '/' in the UNC portion of the string.
However, inside the prefixpath, we can't make assumptions about what
constitutes a delimiter because POSIX allows for embedded '\'
characters. So there we don't attempt to do any conversion, and pass the
prefixpath to the kernel as is. Once the kernel determines whether POSIX
extensions are enabled, it can then convert the path if needed and it's
able to do so. A patch to handle this has already been committed to the
cifs-2.6 git tree.
This patch also fixes an annoyance. When you mount a subdir of a share,
mount.cifs munges the device string so that you can't tell what the
prefixpath is. So if I mount:
//server/share/p1/p2/p3
..then /proc/mounts and mtab will show only:
//server/share
Finally, it also tries to apply some consistent rules to the uppercasing
of strings.
Signed-off-by: Jeff Layton [EMAIL PROTECTED]
---
Summary of changes:
source/client/mount.cifs.c | 90
1 files changed, 66 insertions(+), 24 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source/client/mount.cifs.c b/source/client/mount.cifs.c
index e73d908..fdee87a 100644
--- a/source/client/mount.cifs.c
+++ b/source/client/mount.cifs.c
@@ -63,6 +63,8 @@
#define MS_BIND 4096
#endif
+#define MAX_UNC_LEN 1024
+
#define CONST_DISCARD(type, ptr) ((type) ((void *) (ptr)))
const char *thisprogram;
@@ -74,7 +76,6 @@ static int got_ip = 0;
static int got_unc = 0;
static int got_uid = 0;
static int got_gid = 0;
-static int free_share_name = 0;
static char * user_name = NULL;
static char * mountpassword = NULL;
char * domain_name = NULL;
@@ -837,17 +838,31 @@ static char * check_for_domain(char **ppuser)
return domainnm;
}
+/* replace all occurances of from in a string with to */
+static void replace_char(char *string, char from, char to, int maxlen)
+{
+ char *lastchar = string + maxlen;
+ while (string) {
+ string = strchr(string, from);
+ if (string) {
+ *string = to;
+ if (string = lastchar)
+ return;
+ }
+ }
+}
+
/* Note that caller frees the returned buffer if necessary */
static char * parse_server(char ** punc_name)
{
char * unc_name = *punc_name;
- int length = strnlen(unc_name,1024);
+ int length = strnlen(unc_name, MAX_UNC_LEN);
char * share;
char * ipaddress_string = NULL;
struct hostent * host_entry = NULL;
struct in_addr server_ipaddr;
- if(length 1023) {
+ if(length (MAX_UNC_LEN - 1)) {
printf(mount error: UNC name too long);
return NULL;
}
@@ -866,7 +881,6 @@ static char * parse_server(char ** punc_name)
/* check for nfs syntax ie server:share */
share = strchr(unc_name,':');
if(share) {
- free_share_name = 1;
*punc_name = (char *)malloc(length+3);
if(*punc_name == NULL) {
/* put the original string back if
@@ -874,9 +888,9 @@ static char * parse_server(char ** punc_name)
*punc_name = unc_name;
svn commit: samba-docs r1253 - in trunk/manpages-3: .
Author: idra Date: 2008-03-31 20:13:01 + (Mon, 31 Mar 2008) New Revision: 1253 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=1253 Log: Better doc mount.cifs. Original commit msg from Jeff: This patch adds a section to the mount.cifs manpage to clarify how mount.cifs treats delimiters and when it autoconverts them from one type to another. It also has it state that the use of forward slash as a delimiter is preferred and why. Signed-off-by: Jeff Layton [EMAIL PROTECTED] Modified: trunk/manpages-3/mount.cifs.8.xml Changeset: Modified: trunk/manpages-3/mount.cifs.8.xml === --- trunk/manpages-3/mount.cifs.8.xml 2008-03-27 17:54:31 UTC (rev 1252) +++ trunk/manpages-3/mount.cifs.8.xml 2008-03-31 20:13:01 UTC (rev 1253) @@ -499,6 +499,17 @@ /refsect1 refsect1 + titleSERVICE FORMATTING AND DELIMITERS/title + + para + It's generally preferred to use forward slashes (/) as a delimiter in service names. They are considered to be the universal delimiter since they are generally not allowed to be embedded within path components on Windows machines and the client can convert them to blackslashes (\) unconditionally. Conversely, backslash characters are allowed by POSIX to be part of a path component, and can't be automatically converted in the same way. + /para + para + mount.cifs will attempt to convert backslashes to forward slashes where it's able to do so, but it cannot do so in any path component following the sharename. + /para +/refsect1 + +refsect1 titleENVIRONMENT VARIABLES/title para
svn commit: samba-docs r1254 - in trunk/manpages-3: .
Author: jerry Date: 2008-03-31 20:38:37 + (Mon, 31 Mar 2008) New Revision: 1254 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=1254 Log: Adding WinXP64 and Vista as documented values for %a in smb.conf(5) Modified: trunk/manpages-3/smb.conf.5.xml Changeset: Modified: trunk/manpages-3/smb.conf.5.xml === --- trunk/manpages-3/smb.conf.5.xml 2008-03-31 20:13:01 UTC (rev 1253) +++ trunk/manpages-3/smb.conf.5.xml 2008-03-31 20:38:37 UTC (rev 1254) @@ -481,14 +481,19 @@ varlistentry term%a/term - listitemparathe architecture of the remote - machine. It currently recognizes Samba (constantSamba/constant), - the Linux CIFS file system (constantCIFSFS/constant), OS/2, (constantOS2/constant), - Windows for Workgroups (constantWfWg/constant), Windows 9x/ME - (constantWin95/constant), Windows NT (constantWinNT/constant), - Windows 2000 (constantWin2K/constant), Windows XP (constantWinXP/constant), - and Windows 2003 (constantWin2K3/constant). Anything else will be known as - constantUNKNOWN/constant./para + listitempara + The architecture of the remote + machine. It currently recognizes Samba (constantSamba/constant), + the Linux CIFS file system (constantCIFSFS/constant), OS/2, (constantOS2/constant), + Windows for Workgroups (constantWfWg/constant), Windows 9x/ME + (constantWin95/constant), Windows NT (constantWinNT/constant), + Windows 2000 (constantWin2K/constant), + Windows XP (constantWinXP/constant), + Windows XP 64-bit(constantWinXP64/constant), + Windows 2003 including + 2003R2 (constantWin2K3/constant), and Windows + Vista (constantVista/constant). Anything else will be known as + constantUNKNOWN/constant./para /listitem /varlistentry
svn commit: samba-docs r1255 - in trunk/manpages-3: .
Author: jerry Date: 2008-03-31 20:40:24 + (Mon, 31 Mar 2008) New Revision: 1255 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=samba-docsrev=1255 Log: Document --verbose option to wbinfo Modified: trunk/manpages-3/wbinfo.1.xml Changeset: Modified: trunk/manpages-3/wbinfo.1.xml === --- trunk/manpages-3/wbinfo.1.xml 2008-03-31 20:38:37 UTC (rev 1254) +++ trunk/manpages-3/wbinfo.1.xml 2008-03-31 20:40:24 UTC (rev 1255) @@ -49,6 +49,7 @@ arg choice=opt-U uid/arg arg choice=opt-V/arg arg choice=opt-Y sid/arg + arg choice=opt--verbose/arg /cmdsynopsis /refsynopsisdiv @@ -309,6 +310,14 @@ /varlistentry varlistentry + term--verbose/term + listitempara + Print additional information about the query + results. + /para/listitem + /varlistentry + + varlistentry term-Y|--sid-to-gid sid/term listitemparaConvert a SID to a UNIX group id. If the SID does not correspond to a UNIX group mapped by citerefentry
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-566-gfa5968a
The branch, v3-2-test has been updated
via fa5968a26b552d7f13574a826e506ed2d6630feb (commit)
from e03d1dfdb80333c071b600245eb749ef5664aa22 (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -
commit fa5968a26b552d7f13574a826e506ed2d6630feb
Author: Michael Adam [EMAIL PROTECTED]
Date: Mon Mar 31 13:54:39 2008 +0200
test: add test script for testing net registry.
Michael
---
Summary of changes:
source/script/tests/test_net_registry.sh | 378 ++
source/script/tests/tests_all.sh |7 +
2 files changed, 385 insertions(+), 0 deletions(-)
create mode 100755 source/script/tests/test_net_registry.sh
Changeset truncated at 500 lines:
diff --git a/source/script/tests/test_net_registry.sh
b/source/script/tests/test_net_registry.sh
new file mode 100755
index 000..927882b
--- /dev/null
+++ b/source/script/tests/test_net_registry.sh
@@ -0,0 +1,378 @@
+#!/bin/sh
+
+# tests for the net registry command - local access to the registry db
+
+
+NET=$VALGRIND ${NET:-$BINDIR/net} $CONFIGURATION
+
+NETREG=${NET} registry
+
+incdir=`dirname $0`
+. $incdir/test_functions.sh
+
+failed=0
+
+test_enumerate()
+{
+ KEY=$1
+
+ ${NETREG} enumerate ${KEY}
+}
+
+test_getsd()
+{
+ KEY=$1
+
+ ${NETREG} getsd ${KEY}
+}
+
+test_enumerate_nonexisting()
+{
+ KEY=$1
+ ${NETREG} enumerate ${KEY}
+ if test x$? = x0 ; then
+ echo ERROR: enumerate succeeded with key '${KEY}'
+ false
+ else
+ true
+ fi
+}
+
+test_enumerate_no_key()
+{
+ ${NETREG} enumerate
+ if test x$? = x0 ; then
+ echo ERROR: enumerate succeeded without any key spcified
+ false
+ else
+ true
+ fi
+}
+
+test_create_existing()
+{
+ KEY=HKLM
+ EXPECTED=createkey opened existing ${KEY}
+ OUTPUT=`${NETREG} createkey ${KEY}`
+ if test x$? = x0 ; then
+ if test $OUTPUT = $EXPECTED ; then
+ true
+ else
+ echo got '$OUTPUT', expected '$EXPECTED'
+ false;
+ fi
+ else
+ echo -e $OUTPUT
+ false
+ fi
+}
+
+test_createkey()
+{
+ KEY=$1
+ BASEKEY=`dirname $KEY`
+ SUBKEY=`basename $KEY`
+
+ ${NETREG} createkey ${KEY}
+ if test x$? != x0 ; then
+ false
+ return
+ fi
+
+ # check enumerate of basekey lists new key:
+ OUTPUT=`${NETREG} enumerate ${BASEKEY}`
+ if test x$? != x0 ; then
+ echo ERROR: failed to enumerate key '${BASEKEY}'
+ echo output:
+ echo -e $OUTPUT
+ false
+ return
+ fi
+
+ EXPECTED=Keyname = ${SUBKEY}
+ echo -e $OUTPUT | grep ^Keyname | grep ${SUBKEY}
+ if test x$? != x0 ; then
+ echo ERROR: did not find expexted '$EXPECTED' in output
+ echo output:
+ echo -e $OUTPUT
+ false
+ fi
+
+ # check enumerate of new key works:
+ ${NETREG} enumerate ${KEY}
+}
+
+test_deletekey()
+{
+ KEY=$1
+ BASEKEY=`dirname ${KEY}`
+ SUBKEY=`basename ${KEY}`
+
+ test_createkey ${KEY}
+
+ if test x$? != x0 ; then
+ false
+ return
+ fi
+
+ ${NETREG} deletekey ${KEY}
+
+ # check enumerate of basekey does not show key anymore:
+ OUTPUT=`${NETREG} enumerate ${BASEKEY}`
+ if test x$? != x0 ; then
+ echo -e $OUTPUT
+ false
+ return
+ fi
+
+ UNEXPECTED=Keyname = ${SUBKEY}
+ echo -e $OUTPUT | grep ^Keyname | grep ${SUBKEY}
+ if test x$? = x0 ; then
+ echo ERROR: found '$UNEXPECTED' after delete in output
+ echo output:
+ echo -e $OUTPUT
+ false
+ fi
+
+ # check enumerate of key itself does not work anymore:
+ ${NETREG} enumerate ${KEY}
+ if test x$? = x0 ; then
+ echo ERROR: 'enumerate ${KEY}' works after 'deletekey ${KEY}'
+ false
+ else
+ true
+ fi
+}
+
+test_deletekey_nonexisting()
+{
+ KEY=$1
+
+ test_deletekey ${KEY}
+
+ if test x$? != x0 ; then
+ false
+ return
+ fi
+
+ ${NETREG} deletekey ${KEY}
+ if test x$? = x0 ; then
+ echo ERROR: delete after delete succeeded for key '${KEY}'
+ false
+ fi
+}
+
+test_createkey_with_subkey()
+{
+ KEY=$1
+ KEY2=`dirname ${KEY}`
+ SUBKEYNAME2=`basename ${KEY}`
+ BASENAME=`dirname ${KEY2}`
+ SUBKEYNAME1=`basename ${KEY2}`
+
+ ${NETREG} createkey
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-575-gc40522c
The branch, v3-2-test has been updated
via c40522cfe97c4e5eedccc9c56f47f9d4a8bcdaaf (commit)
via 8b4eac0ab186c0293d3f007f0c98d60e0eda (commit)
via 776facabf6f09f643d6dc526aa83f8db517465f9 (commit)
via 3adf82554a6f54878aed99c3e894aef1b7ecfd84 (commit)
via da7f006539219f8ccd525ef1fcd131d5f9558bf1 (commit)
via b4d944e724f7ae2a97ba788b185aba7b7308b475 (commit)
via 1b6083449fbc2a252c046a0757c411be64e6b6c0 (commit)
via 29c42792567870f3dc23363f4357fecbec862937 (commit)
via 2fd90b62d7e61fa0c23f8f41e9f12fc16f29a8b1 (commit)
from fa5968a26b552d7f13574a826e506ed2d6630feb (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -
commit c40522cfe97c4e5eedccc9c56f47f9d4a8bcdaaf
Author: Günther Deschner [EMAIL PROTECTED]
Date: Tue Apr 1 00:14:00 2008 +0200
Fix build warning.
Guenther
commit 8b4eac0ab186c0293d3f007f0c98d60e0eda
Author: Günther Deschner [EMAIL PROTECTED]
Date: Tue Apr 1 00:11:55 2008 +0200
Fix SRVSVC NetShareInfo level 502 client-side.
Guenther
commit 776facabf6f09f643d6dc526aa83f8db517465f9
Author: Günther Deschner [EMAIL PROTECTED]
Date: Tue Apr 1 00:02:48 2008 +0200
Fix SRVSVC ShareInfo level 502 server side handling.
Guenther
commit 3adf82554a6f54878aed99c3e894aef1b7ecfd84
Author: Günther Deschner [EMAIL PROTECTED]
Date: Mon Mar 31 23:55:16 2008 +0200
Re-run make idl.
Guenther
commit da7f006539219f8ccd525ef1fcd131d5f9558bf1
Author: Günther Deschner [EMAIL PROTECTED]
Date: Mon Mar 31 23:52:36 2008 +0200
Fix IDL for srvsvc_NetShareInfo502. It does indeed contain a sec_desc_buf.
Guenther
commit b4d944e724f7ae2a97ba788b185aba7b7308b475
Author: Günther Deschner [EMAIL PROTECTED]
Date: Mon Mar 31 23:51:34 2008 +0200
Fix SRVSVC ShareInfo max_users handling server side.
Guenther
commit 1b6083449fbc2a252c046a0757c411be64e6b6c0
Author: Günther Deschner [EMAIL PROTECTED]
Date: Mon Mar 31 23:47:26 2008 +0200
Re-run make idl.
Guenther
commit 29c42792567870f3dc23363f4357fecbec862937
Author: Günther Deschner [EMAIL PROTECTED]
Date: Mon Mar 31 23:45:26 2008 +0200
Use uint32 in max_users field in SRVSVC ShareInfo levels consistently.
Guenther
commit 2fd90b62d7e61fa0c23f8f41e9f12fc16f29a8b1
Author: Günther Deschner [EMAIL PROTECTED]
Date: Mon Mar 31 22:49:03 2008 +0200
Fix _srvsvc_NetShareSetInfo.
Guenther
---
Summary of changes:
source/librpc/gen_ndr/ndr_srvsvc.c | 54 +++
source/librpc/gen_ndr/srvsvc.h |7 ++--
source/librpc/idl/srvsvc.idl |8 ++---
source/rpc_client/init_srvsvc.c| 10 ++
source/rpc_server/srv_samr_nt.c|2 +-
source/rpc_server/srv_srvsvc_nt.c | 30 +++
source/utils/net_rpc.c |4 +-
7 files changed, 41 insertions(+), 74 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source/librpc/gen_ndr/ndr_srvsvc.c
b/source/librpc/gen_ndr/ndr_srvsvc.c
index fbf84ab..4e9e81a 100644
--- a/source/librpc/gen_ndr/ndr_srvsvc.c
+++ b/source/librpc/gen_ndr/ndr_srvsvc.c
@@ -4438,12 +4438,11 @@ static enum ndr_err_code
ndr_push_srvsvc_NetShareInfo502(struct ndr_push *ndr, i
NDR_CHECK(ndr_push_srvsvc_ShareType(ndr, NDR_SCALARS, r-type));
NDR_CHECK(ndr_push_unique_ptr(ndr, r-comment));
NDR_CHECK(ndr_push_uint32(ndr, NDR_SCALARS, r-permissions));
- NDR_CHECK(ndr_push_int32(ndr, NDR_SCALARS, r-max_users));
+ NDR_CHECK(ndr_push_uint32(ndr, NDR_SCALARS, r-max_users));
NDR_CHECK(ndr_push_uint32(ndr, NDR_SCALARS, r-current_users));
NDR_CHECK(ndr_push_unique_ptr(ndr, r-path));
NDR_CHECK(ndr_push_unique_ptr(ndr, r-password));
- NDR_CHECK(ndr_push_uint32(ndr, NDR_SCALARS, r-unknown));
- NDR_CHECK(ndr_push_unique_ptr(ndr, r-sd));
+ NDR_CHECK(ndr_push_sec_desc_buf(ndr, NDR_SCALARS, r-sd_buf));
}
if (ndr_flags NDR_BUFFERS) {
if (r-name) {
@@ -4470,14 +4469,7 @@ static enum ndr_err_code
ndr_push_srvsvc_NetShareInfo502(struct ndr_push *ndr, i
NDR_CHECK(ndr_push_uint32(ndr, NDR_SCALARS,
ndr_charset_length(r-password, CH_UTF16)));
NDR_CHECK(ndr_push_charset(ndr, NDR_SCALARS,
r-password, ndr_charset_length(r-password, CH_UTF16), sizeof(uint16_t),
CH_UTF16));
}
- if (r-sd) {
- {
- struct ndr_push *_ndr_sd;
- NDR_CHECK(ndr_push_subcontext_start(ndr,
_ndr_sd, 4, -1));
- NDR_CHECK(ndr_push_security_descriptor(_ndr_sd,
NDR_SCALARS|NDR_BUFFERS,
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-576-g3cb1cde
The branch, v3-2-test has been updated via 3cb1cdee9307cafa80ab95233a536f5dd7882ff1 (commit) from c40522cfe97c4e5eedccc9c56f47f9d4a8bcdaaf (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit 3cb1cdee9307cafa80ab95233a536f5dd7882ff1 Author: Günther Deschner [EMAIL PROTECTED] Date: Tue Apr 1 00:32:23 2008 +0200 Fix build of rpcclient. Guenther --- Summary of changes: source/rpcclient/cmd_srvsvc.c |4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) Changeset truncated at 500 lines: diff --git a/source/rpcclient/cmd_srvsvc.c b/source/rpcclient/cmd_srvsvc.c index 51c9819..070fb36 100644 --- a/source/rpcclient/cmd_srvsvc.c +++ b/source/rpcclient/cmd_srvsvc.c @@ -243,8 +243,8 @@ static void display_share_info_502(struct srvsvc_NetShareInfo502 *r) printf(\tmax_uses:\t%d\n, r-max_users); printf(\tnum_uses:\t%d\n, r-current_users); - if (r-sd) - display_sec_desc(r-sd); + if (r-sd_buf.sd) + display_sec_desc(r-sd_buf.sd); } -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-577-ga7499e9
The branch, v3-2-test has been updated via a7499e994aef743ea9c443f9a1618b262f6eda93 (commit) from 3cb1cdee9307cafa80ab95233a536f5dd7882ff1 (commit) http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test - Log - commit a7499e994aef743ea9c443f9a1618b262f6eda93 Author: Jeremy Allison [EMAIL PROTECTED] Date: Mon Mar 31 16:46:20 2008 -0700 Reduce the race condition in Samba4 in RAW-RENAME test. We rename a file using trans2 setfileinfo on one connection, and then check the file name has changed on the other. In Samba we achieve this by sending a local message to the other process. This change causes us to re-scan for incoming messages after we've woken up from the select (which is cheap if there are no pending messages). This reduces the race significantly. Volker please review. Jeremy. --- Summary of changes: source/smbd/process.c |9 + 1 files changed, 9 insertions(+), 0 deletions(-) Changeset truncated at 500 lines: diff --git a/source/smbd/process.c b/source/smbd/process.c index 9c01bba..03216a0 100644 --- a/source/smbd/process.c +++ b/source/smbd/process.c @@ -853,6 +853,15 @@ static NTSTATUS receive_message_or_smb(TALLOC_CTX *mem_ctx, char **buffer, goto again; } + /* +* We've just woken up from a protentially long select sleep. +* Ensure we process local messages as we need to synchronously +* process any messages from other smbd's to avoid file rename race +* conditions. This call is cheap if there are no messages waiting. +* JRA. +*/ + message_dispatch(smbd_messaging_context()); + /* if we get EINTR then maybe we have received an oplock signal - treat this as select returning 1. This is ugly, but is the best we can do until the oplock code knows more about -- Samba Shared Repository
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-578-g26a74d0
The branch, v3-2-test has been updated
via 26a74d01bb2b53ffa5d296ff1c7d8b2b0d17831a (commit)
from a7499e994aef743ea9c443f9a1618b262f6eda93 (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -
commit 26a74d01bb2b53ffa5d296ff1c7d8b2b0d17831a
Author: Jeremy Allison [EMAIL PROTECTED]
Date: Mon Mar 31 16:56:21 2008 -0700
Move the message_dispatch() call after the check for errno on
the select return. We don't want the call to message_dispatch
to mess up the errno value.
Jeremy.
---
Summary of changes:
source/smbd/process.c | 22 +++---
1 files changed, 11 insertions(+), 11 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source/smbd/process.c b/source/smbd/process.c
index 03216a0..9aa775d 100644
--- a/source/smbd/process.c
+++ b/source/smbd/process.c
@@ -853,15 +853,6 @@ static NTSTATUS receive_message_or_smb(TALLOC_CTX
*mem_ctx, char **buffer,
goto again;
}
- /*
-* We've just woken up from a protentially long select sleep.
-* Ensure we process local messages as we need to synchronously
-* process any messages from other smbd's to avoid file rename race
-* conditions. This call is cheap if there are no messages waiting.
-* JRA.
-*/
- message_dispatch(smbd_messaging_context());
-
/* if we get EINTR then maybe we have received an oplock
signal - treat this as select returning 1. This is ugly, but
is the best we can do until the oplock code knows more about
@@ -880,8 +871,17 @@ static NTSTATUS receive_message_or_smb(TALLOC_CTX
*mem_ctx, char **buffer,
if (selrtn == -1) {
/* something is wrong. Maybe the socket is dead? */
return map_nt_error_from_unix(errno);
- }
-
+ }
+
+ /*
+* We've just woken up from a protentially long select sleep.
+* Ensure we process local messages as we need to synchronously
+* process any messages from other smbd's to avoid file rename race
+* conditions. This call is cheap if there are no messages waiting.
+* JRA.
+*/
+ message_dispatch(smbd_messaging_context());
+
/* Did we timeout ? */
if (selrtn == 0) {
return NT_STATUS_IO_TIMEOUT;
--
Samba Shared Repository
Build status as of Tue Apr 1 00:00:02 2008
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2008-03-31 00:00:24.0 + +++ /home/build/master/cache/broken_results.txt 2008-04-01 00:00:24.0 + @@ -1,4 +1,4 @@ -Build status as of Mon Mar 31 00:00:01 2008 +Build status as of Tue Apr 1 00:00:02 2008 Build counts: Tree Total Broken Panic @@ -14,7 +14,7 @@ rsync29 12 0 samba-docs 0 0 0 samba-gtk4 4 0 -samba_3_2_test 29 24 0 +samba_3_2_test 29 25 0 samba_4_0_test 27 19 0 smb-build27 3 0 talloc 29 6 0
[SCM] Samba Shared Repository - branch v3-2-test updated - release-3-2-0pre2-579-gda2c19c
The branch, v3-2-test has been updated
via da2c19c481d0041872b4ce2f5105052077f3d3b8 (commit)
from 26a74d01bb2b53ffa5d296ff1c7d8b2b0d17831a (commit)
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-2-test
- Log -
commit da2c19c481d0041872b4ce2f5105052077f3d3b8
Author: Jeremy Allison [EMAIL PROTECTED]
Date: Mon Mar 31 17:01:27 2008 -0700
Ok, final move of this code :-). I think I've found the correct
place for it now where it will cause minimal disruption (only
call the extra message_dispatch just before reading the next
smb off the wire).
Jeremy.
---
Summary of changes:
source/smbd/process.c | 18 +-
1 files changed, 9 insertions(+), 9 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source/smbd/process.c b/source/smbd/process.c
index 9aa775d..8868431 100644
--- a/source/smbd/process.c
+++ b/source/smbd/process.c
@@ -873,15 +873,6 @@ static NTSTATUS receive_message_or_smb(TALLOC_CTX
*mem_ctx, char **buffer,
return map_nt_error_from_unix(errno);
}
- /*
-* We've just woken up from a protentially long select sleep.
-* Ensure we process local messages as we need to synchronously
-* process any messages from other smbd's to avoid file rename race
-* conditions. This call is cheap if there are no messages waiting.
-* JRA.
-*/
- message_dispatch(smbd_messaging_context());
-
/* Did we timeout ? */
if (selrtn == 0) {
return NT_STATUS_IO_TIMEOUT;
@@ -903,6 +894,15 @@ static NTSTATUS receive_message_or_smb(TALLOC_CTX
*mem_ctx, char **buffer,
goto again;
}
+ /*
+* We've just woken up from a protentially long select sleep.
+* Ensure we process local messages as we need to synchronously
+* process any messages from other smbd's to avoid file rename race
+* conditions. This call is cheap if there are no messages waiting.
+* JRA.
+*/
+ message_dispatch(smbd_messaging_context());
+
status = receive_smb_talloc(mem_ctx, smbd_server_fd(), buffer, 0,
p_unread, p_encrypted, len);
--
Samba Shared Repository
